[Bug]: Identity Provider - LDAP cannot use LDAPS when certificate signed by unknown authority

[K-J-VV]

Preflight Checklist

• I could not find a solution in the documentation, the existing issues or discussions
• I have joined the ZITADEL chat

Environment

Self-hosted

Version

No response

Database

CockroachDB

Database Version

No response

Describe the problem caused by this bug

I'm unable to join my self-hosted LDAP server (OpenLDAP) via LDAPS. It seems the issue is the certificates I am using on the LDAP server are self-signed and so Zitadel does not view these as 'secure enough'.

The specific Error is:
LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate signed by unknown authority

I believe the options to "work through" this is either:

• Add the certificates as trusted by Zitadel
• Add an option in the LDAP Identity Provider configuration to ignore/trust certificates signed by unknown authorities

Any help to resolve this would be great! Thank you in advance

To reproduce

The specific Error is:
LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate signed by unknown authority

Screenshots

No response

Expected behavior

No response

Operating System

No response

Relevant Configuration

No response

Additional Context

No response

[livio-a]

Let's allow management of the certificate through the LDAP IdP configuration