# Getting tls bad certificate issue in Vault K8 Agent Injector

**URL:** <https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722>\
**Category:** Vault\
**Tags:** k8s\
**Created:** [August 3, 2021, 2:20pm UTC](https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722 "2021-08-03T14:20:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![security1](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/security1/32/16161_2.png) [@security1](https://discuss.hashicorp.com/u/security1)\
**Post date:** [August 3, 2021, 2:20pm UTC](https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722/1 "2021-08-03T14:20:06Z")

</div>

I am running the vault agent injector with auto tls enabled and configured an external vault server. Everything was working fine, suddenly after 24 hours, I am getting this bad certificate issue.

I have even tried using `vault.hashicorp.com/tls-skip-verify annotation` but the result is the same.  
These are the agent injector logs.

```auto
2021-08-03T13:56:14.122Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:36180: remote error: tls: bad certificate
2021-08-03T13:57:10.726Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:4425: remote error: tls: bad certificate
2021-08-03T14:01:01.632Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:10077: remote error: tls: bad certificate
2021-08-03T14:01:26.954Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:50072: remote error: tls: bad certificate
2021-08-03T14:01:54.899Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:17536: remote error: tls: bad certificate
2021-08-03T14:12:29.850Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:12749: remote error: tls: bad certificate
2021-08-03T14:12:52.509Z [ERROR] handler: http: TLS handshake error from 172.17.0.1:1626: remote error: tls: bad certificate

```

---

<div class="post-metadata">

**Author:** ![alegal](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/alegal/32/23986_2.png) [@alegal](https://discuss.hashicorp.com/u/alegal)\
**Post date:** [January 26, 2022, 2:19pm UTC](https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722/2 "2022-01-26T14:19:55Z")

</div>

Hello,

I have the same issue (Vault 1.9.0). Any clue to fix the problem ?

Thanks,  
Arnaud

---

<div class="post-metadata">

**Author:** ![tirelibirefe](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/tirelibirefe/32/23831_2.png) [@tirelibirefe](https://discuss.hashicorp.com/u/tirelibirefe)\
**Post date:** [July 1, 2022, 9:32pm UTC](https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722/3 "2022-07-01T21:32:07Z")

</div>

Hello folks;  
Were you able to fix the problem? I get the same error.

Thx & Rgrds

---

<div class="post-metadata">

**Author:** ![lucasscheepers](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/lucasscheepers/32/30912_2.png) [@lucasscheepers](https://discuss.hashicorp.com/u/lucasscheepers)\
**Post date:** [September 22, 2022, 3:44pm UTC](https://discuss.hashicorp.com/t/getting-tls-bad-certificate-issue-in-vault-k8-agent-injector/27722/4 "2022-09-22T15:44:21Z")

</div>

> [@security1](#):
>
> Everything was working fine, suddenly after 24 hours,

Currently experiencing [the same issue.](https://github.com/hashicorp/vault-helm/issues/787)

Did you fix error?