# \#tls **URL:** https://community.temporal.io/tag/tls/132.md [Latest](https://community.temporal.io/latest.md) · [Categories](https://community.temporal.io/categories.md) · [Tags](https://community.temporal.io/tags.md) --- ## [Selfhosted: Frontend's readiness probe fails, pod does not start](https://community.temporal.io/t/selfhosted-frontends-readiness-probe-fails-pod-does-not-start/19496)
**Author:** [@Ankit\_Paudel](https://community.temporal.io/u/Ankit_Paudel)\ **Replies:** 1\ **Last updated:** [April 20, 2026, 6:28pm UTC](https://community.temporal.io/t/selfhosted-frontends-readiness-probe-fails-pod-does-not-start/19496 "2026-04-20T18:28:26Z")
I could not get selfhosted temporal to deploy, the default readiness probe of grpc on 7233 does not pass. It might be due to k8s’s grpc check not supporting tls, not 100% sure on that though, I was using helm chart of v… --- ## [Steps for intermediate CA cert rotation](https://community.temporal.io/t/steps-for-intermediate-ca-cert-rotation/19217)
**Author:** [@samlo](https://community.temporal.io/u/samlo)\ **Replies:** 0\ **Last updated:** [January 28, 2026, 12:55pm UTC](https://community.temporal.io/t/steps-for-intermediate-ca-cert-rotation/19217 "2026-01-28T12:55:23Z")
We currently have mtls setup for internode connections, wherein nodes are using the cert chain signed eventually by the root CA as certFile and a CA file containing the intermediate and root CA for clientCaFiles, rootCaF… --- ## [Temporal worker failing to connect v1.22](https://community.temporal.io/t/temporal-worker-failing-to-connect-v1-22/10218)
**Author:** [@Yehuda\_Alkrif](https://community.temporal.io/u/Yehuda_Alkrif)\ **Replies:** 4\ **Last updated:** [November 6, 2025, 6:05pm UTC](https://community.temporal.io/t/temporal-worker-failing-to-connect-v1-22/10218 "2025-11-06T18:05:17Z")
hi we deploy Temporal on k8s , we enabled mtls and it seems that all worked , when we add authorization the temporal worker start to fail with error . “level”:“error”,“ts”:“2023-11-27T16:51:45.083Z”,“msg”:“error start… --- ## [Dynamic TLS cert reload is not working](https://community.temporal.io/t/dynamic-tls-cert-reload-is-not-working/5586)
**Author:** [@praveenthuwat](https://community.temporal.io/u/praveenthuwat)\ **Replies:** 4\ **Last updated:** [August 27, 2025, 1:11pm UTC](https://community.temporal.io/t/dynamic-tls-cert-reload-is-not-working/5586 "2025-08-27T13:11:23Z")
Hi, Does the temporal server supports auto-detection and reload of renewed TLS certs dynamically(without a node restart)? From our initial testing, it seems like that is not the case. Please can you confirm? also, we wa… --- ## [Root CA Cert to validate Server TLS Certificate](https://community.temporal.io/t/root-ca-cert-to-validate-server-tls-certificate/16781)
**Author:** [@sunamu](https://community.temporal.io/u/sunamu)\ **Replies:** 0\ **Last updated:** [March 13, 2025, 5:55am UTC](https://community.temporal.io/t/root-ca-cert-to-validate-server-tls-certificate/16781 "2025-03-13T05:55:02Z")
Hi, we are planning to use mTLS to authenticate with Temporal Cloud. In my PoC, I am finding that Temporal Cloud is using a server certificate signed by a public CA. This CA is trusted in my dev machine, but not in the … --- ## [Kubernetes + Helm + Nginx Ingress in combination with Temporal TLS not working. Help needed](https://community.temporal.io/t/kubernetes-helm-nginx-ingress-in-combination-with-temporal-tls-not-working-help-needed/12869)
**Author:** [@marcel](https://community.temporal.io/u/marcel)\ **Replies:** 2\ **Last updated:** [January 9, 2025, 9:28am UTC](https://community.temporal.io/t/kubernetes-helm-nginx-ingress-in-combination-with-temporal-tls-not-working-help-needed/12869 "2025-01-09T09:28:17Z")
Hi guys, we are trying to run temporal on Kubernetes with the provided helm chart example of temporal. But we are struggling a lot with the proper configuration when it comes to TLS. What we got so far is that both ngin… --- ## [Java client with TLS](https://community.temporal.io/t/java-client-with-tls/5313)
**Author:** [@vkuragin](https://community.temporal.io/u/vkuragin)\ **Replies:** 8\ **Last updated:** [April 18, 2024, 2:02pm UTC](https://community.temporal.io/t/java-client-with-tls/5313 "2024-04-18T14:02:57Z")
We have a temporal server installed in openshift cluster behind https HAproxy. In order to access it we need to establish tls connection (temporal server itself is not ssl enabled). We are able to do this using tctl: t… --- ## [Worker does not start on kubernetes](https://community.temporal.io/t/worker-does-not-start-on-kubernetes/4622)
**Author:** [@Mundus\_Creatus\_Est](https://community.temporal.io/u/Mundus_Creatus_Est)\ **Replies:** 6\ **Last updated:** [January 5, 2024, 10:49am UTC](https://community.temporal.io/t/worker-does-not-start-on-kubernetes/4622 "2024-01-05T10:49:09Z")
All pods are working ony worker is restarting. It’s fresh installation, empty database with new schema. server-version":"1.16.1 "msg":"worker starting","service":"worker","component":"worker","logging-call-at":"service… --- ## [Connect to secure ES cluster](https://community.temporal.io/t/connect-to-secure-es-cluster/5859)
**Author:** [@ravikiran](https://community.temporal.io/u/ravikiran)\ **Replies:** 4\ **Last updated:** [December 13, 2023, 8:26am UTC](https://community.temporal.io/t/connect-to-secure-es-cluster/5859 "2023-12-13T08:26:43Z")
hi, We are using helm charts to setup the Temporal server and we are using 1.9.2 version. We need to connect to a secure ES cluster with https and tls certificates. Went through this doc Temporal Server security | Tem… --- ## [Temporal worker is unable to connect to Cluster](https://community.temporal.io/t/temporal-worker-is-unable-to-connect-to-cluster/9278)
**Author:** [@Shrikanth](https://community.temporal.io/u/Shrikanth)\ **Replies:** 2\ **Last updated:** [August 24, 2023, 4:20pm UTC](https://community.temporal.io/t/temporal-worker-is-unable-to-connect-to-cluster/9278 "2023-08-24T16:20:01Z")
I am using Typescript SDK & docker-compose TLS set-up. I initially created certs by running “generate-test-certs.sh” present in “tls-simple” project. I am using “NativeConnection” in worker: const connection = awa… --- ## [Error when enable Multi-cluster replication + TLS](https://community.temporal.io/t/error-when-enable-multi-cluster-replication-tls/8003)
**Author:** [@tmu](https://community.temporal.io/u/tmu)\ **Replies:** 3\ **Last updated:** [July 10, 2023, 2:52pm UTC](https://community.temporal.io/t/error-when-enable-multi-cluster-replication-tls/8003 "2023-07-10T14:52:31Z")
Hi experts, TLDR Do we support Multi-cluster replication with TLS enabled (frontend)? (Temporal v1.19.1) More Context I am trying to test Multi-cluster replication with TLS enabled but got following errors when run t… --- ## [\[TypeScript SDK\] tls connection error](https://community.temporal.io/t/typescript-sdk-tls-connection-error/7081)
**Author:** [@Eduard\_Terzi](https://community.temporal.io/u/Eduard_Terzi)\ **Replies:** 4\ **Last updated:** [January 30, 2023, 9:22am UTC](https://community.temporal.io/t/typescript-sdk-tls-connection-error/7081 "2023-01-30T09:22:56Z")
We are running a TypeScript SDK@1.52 and Temporal Cloud 2.91 Our WorkflowClient is created this way: const connectionConfig: ConnectionOptions = { address: process.env.TEMPORAL\_URL, connectTimeout: '30s', … --- ## [Tctl won't use TLS config specified in env](https://community.temporal.io/t/tctl-wont-use-tls-config-specified-in-env/5155)
**Author:** [@tareque](https://community.temporal.io/u/tareque)\ **Replies:** 7\ **Last updated:** [July 6, 2022, 8:31pm UTC](https://community.temporal.io/t/tctl-wont-use-tls-config-specified-in-env/5155 "2022-07-06T20:31:02Z")
Hi, I’ve been trying to get tctl to talk to the frontend server over mTLS. I followed the instructions at samples-server/tls/tls-full at main · temporalio/samples-server · GitHub to generate the mTLS certs. I can connec… --- ## [Helm Chart with TLS](https://community.temporal.io/t/helm-chart-with-tls/2900)
**Author:** [@phani](https://community.temporal.io/u/phani)\ **Replies:** 1\ **Last updated:** [June 18, 2022, 2:10pm UTC](https://community.temporal.io/t/helm-chart-with-tls/2900 "2022-06-18T14:10:47Z")
Hi All, How to add TLS certificates path( we can add certs to config map or secrets ) to helm charts . We are able to figure out how to add ca certs to configmap we want to know how to add the path to helm chart to a… --- ## [Tlssimple example is gving this exception when tryig to start worker: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address 127.0.0.1 found](https://community.temporal.io/t/tlssimple-example-is-gving-this-exception-when-tryig-to-start-worker-javax-net-ssl-sslhandshakeexception-java-security-cert-certificateexception-no-subject-alternative-names-matching-ip-address-127-0-0-1-found/4932)
**Author:** [@pradnya.bhalekar](https://community.temporal.io/u/pradnya.bhalekar)\ **Replies:** 10\ **Last updated:** [June 9, 2022, 5:12pm UTC](https://community.temporal.io/t/tlssimple-example-is-gving-this-exception-when-tryig-to-start-worker-javax-net-ssl-sslhandshakeexception-java-security-cert-certificateexception-no-subject-alternative-names-matching-ip-address-127-0-0-1-found/4932 "2022-06-09T17:12:32Z")
I am trying the tlssimple example: but when trying to start the worker i, get the exception: WorkflowServiceStubs service = WorkflowServiceStubs.newInstance( WorkflowServiceStubsOptions.newBuilder() .se… --- ## [How to use the 1.15.1 remoteClusters config feature?](https://community.temporal.io/t/how-to-use-the-1-15-1-remoteclusters-config-feature/4118)
**Author:** [@Andrey\_Dubnik](https://community.temporal.io/u/Andrey_Dubnik)\ **Replies:** 5\ **Last updated:** [April 11, 2022, 9:54am UTC](https://community.temporal.io/t/how-to-use-the-1-15-1-remoteclusters-config-feature/4118 "2022-04-11T09:54:02Z")
Hi, there is a new feature of 1.15 which have a separate mTLS configuration section for the remote clusters. How does it work compare to 1.14+? Is this a breaking change? --- ## [SSL postgres and temporal](https://community.temporal.io/t/ssl-postgres-and-temporal/4216)
**Author:** [@arkasha18](https://community.temporal.io/u/arkasha18)\ **Replies:** 3\ **Last updated:** [March 18, 2022, 11:50pm UTC](https://community.temporal.io/t/ssl-postgres-and-temporal/4216 "2022-03-18T23:50:19Z")
can’t connect to PostgreSQL, odyssey (same Pgbouncer) requires ssl connection. my Swarm stack file services: temporal: environment: - DB=postgresql - DB\_PORT=6432 - SSL=true - SQL\_TLS=true - SQL\_TLS\_DISABLE\_HOST… --- ## [Error after upgrading from 1.14.4 to 1.15.2](https://community.temporal.io/t/error-after-upgrading-from-1-14-4-to-1-15-2/4196)
**Author:** [@sloganwh](https://community.temporal.io/u/sloganwh)\ **Replies:** 1\ **Last updated:** [March 16, 2022, 8:10pm UTC](https://community.temporal.io/t/error-after-upgrading-from-1-14-4-to-1-15-2/4196 "2022-03-16T20:10:13Z")
I am testing an upgrade from v1.14.4 to v1.15.2 and run into an issue when TLS is enabled. The temporal server will not start with the following exception. {"level":"fatal","ts":"2022-03-16T15:20:17.671Z","msg":"error … --- ## [Unable to execute workflow context deadline exceeded\` after setting up mtls](https://community.temporal.io/t/unable-to-execute-workflow-context-deadline-exceeded-after-setting-up-mtls/3124)
**Author:** [@john](https://community.temporal.io/u/john)\ **Replies:** 8\ **Last updated:** [December 16, 2021, 6:20pm UTC](https://community.temporal.io/t/unable-to-execute-workflow-context-deadline-exceeded-after-setting-up-mtls/3124 "2021-12-16T18:20:06Z")
I have enabled mtls for both internode and front-end, but now when I try to start a workflow, I get a Unable to execute workflow context deadline exceeded error. This error is not very informative, and I’m not really sur… --- ## [Is it possible to configure temporal/temporal front end to accept both tls and non tls traffic?](https://community.temporal.io/t/is-it-possible-to-configure-temporal-temporal-front-end-to-accept-both-tls-and-non-tls-traffic/2848)
**Author:** [@madhu](https://community.temporal.io/u/madhu)\ **Replies:** 1\ **Last updated:** [September 2, 2021, 2:04pm UTC](https://community.temporal.io/t/is-it-possible-to-configure-temporal-temporal-front-end-to-accept-both-tls-and-non-tls-traffic/2848 "2021-09-02T14:04:15Z")
Can the temporal server be configured to accept both TLS traffic and non TLS traffic? i have a set of clients which are internal in nature, which i want to connect without TLS and i have another set of clients which ar… --- ## [Enable End-to-End TLS (HTTPS to Container) in Temporal Web](https://community.temporal.io/t/enable-end-to-end-tls-https-to-container-in-temporal-web/2817)
**Author:** [@arnesenfamily](https://community.temporal.io/u/arnesenfamily)\ **Replies:** 11\ **Last updated:** [August 30, 2021, 7:13pm UTC](https://community.temporal.io/t/enable-end-to-end-tls-https-to-container-in-temporal-web/2817 "2021-08-30T19:13:29Z")
I’ll preface my comment with, I’ve read this post which includes my exact error. However, I suspect that my error is that I am misunderstanding the purpose of these ENV vars: My initial thought was that these env var…