Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi All,

We are trying to call an HTTPS endpoint (TLS) as part of the refresh token hook however it is failing with - x509:certificate signed by unknown authority.

Can someone kindly please suggest how can we add  certificates to ory hydras tls trust store.

it seems like you're out of luck, that hook does not allow configuring of the tls config, that would probably require a pr

The Go client should be using the operating system's trusted CA store by default.
So if you can add your CA to the trusted list in your host then Hydra should honour that.

The hook request is made using Go's standard `net/http` library so you could search for more info on trusting a custom authority using that rather than Hydra specifically, for better results