# TLS Certificate verification failed

**URL:** <https://discuss.pomerium.com/t/tls-certificate-verification-failed/425>\
**Category:** Support\
**Created:** [November 12, 2024, 4:05am UTC](https://discuss.pomerium.com/t/tls-certificate-verification-failed/425 "2024-11-12T04:05:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sidhant](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Sidhant](https://discuss.pomerium.com/u/Sidhant)\
**Post date:** [November 12, 2024, 4:05am UTC](https://discuss.pomerium.com/t/tls-certificate-verification-failed/425/1 "2024-11-12T04:05:35Z")

</div>

TLS certificate verification failed when verifying the JWT: x509: certificate is valid for \*, not pomerium

How do i resolve this error

---

<div class="post-metadata">

**Author:** ![denis](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@denis](https://discuss.pomerium.com/u/denis)\
**Post date:** [November 13, 2024, 4:29pm UTC](https://discuss.pomerium.com/t/tls-certificate-verification-failed/425/2 "2024-11-13T16:29:48Z")

</div>

please provide more details about which product / version you’re running, what is your configuration, exact log lines, and reprod steps.

are you trying to verify pomerium assertion JWT? you need make sure your Pomerium is serving correct certificates first.

Are you able to creata some test route and make it work (i.e. see our Verify quickstart)

---

<div class="post-metadata">

**Author:** ![Sidhant](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@Sidhant](https://discuss.pomerium.com/u/Sidhant)\
**Post date:** [November 13, 2024, 5:12pm UTC](https://discuss.pomerium.com/t/tls-certificate-verification-failed/425/3 "2024-11-13T17:12:15Z")

</div>

config  
authenticate\_service\_url: [https://authenticate.localhost.pomerium.io](https://authenticate.localhost.pomerium.io)

idp\_provider: oidc  
idp\_client\_id: ‘mynewclient’  
idp\_client\_secret: ‘fgPNOe7q8dm9iLwM81w5Cv4oZlY3RLzI’  
idp\_provider\_url: ‘[http://keycloak.localhost.pomerium.io:8080/realms/Pomerium](http://keycloak.localhost.pomerium.io:8080/realms/Pomerium)’

signing\_key: LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVA2TUN5UFI5OUNmSEVkU0s4cVdzbk51Q0RyMVZ3ay93RER1RVhyQitELzZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQ0JTK3gyQnJRNVJqNHJFcU5PSEVsUFVESXJiRlNhRitoWEhEL1RYby9rQWVKU1lJSjJHVwpZMnE0a0NPNTU4RmdoYmxDTUplYVdjV1luT3JuZkpxeXRnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=

routes:

- from: [https://verify.localhost.pomerium.io](https://verify.localhost.pomerium.io)  
to: [http://verify:8000](http://verify:8000)  
allow\_any\_authenticated\_user: false  
pass\_identity\_headers: true

docker-compose  
services:  
mykeycloak:  
image: [Quay](http://quay.io/keycloak/keycloak:22.0.1)  
command:  
- start-dev  
environment:  
- KEYCLOAK\_ADMIN=admin  
- KEYCLOAK\_ADMIN\_PASSWORD=admin  
ports:  
- 8080:8080  
networks:  
default:  
aliases:  
- [keycloak.localhost.pomerium.io](http://keycloak.localhost.pomerium.io)  
pomerium:  
image: [cr.pomerium.com/pomerium/pomerium:latest](http://cr.pomerium.com/pomerium/pomerium:latest)  
volumes:  
- ./config.yaml:/pomerium/config.yaml:ro  
ports:  
- 443:443  
verify:  
image: [cr.pomerium.com/pomerium/verify:latest](http://cr.pomerium.com/pomerium/verify:latest)  
environment:  
JWKS\_ENDPOINT: [https://pomerium/.well-known/pomerium/jwks.json](https://pomerium/.well-known/pomerium/jwks.json)