Skip to content
Zulip help center

Use a custom certificate

By default, Zulip generates a signed certificate during the server install process. In some cases, a server administrator may choose not to use that feature, in which case your Zulip server may be using a self-signed certificate. This is most common for Zulip servers not connected to the public internet.

Web

Section titled “Web”

Most browsers will show a warning if you try to connect to a Zulip server with a self-signed certificate.

If you are absolutely, 100% sure that the Zulip server you are connecting to is supposed to have a self-signed certificate, click through the warnings and follow the instructions on-screen.

If you are less than 100% sure, contact your server administrator. Accepting a malicious self-signed certificate would give a stranger full access to your Zulip account, including your username and password.

Desktop

Section titled “Desktop”

Zulip Desktop uses the operating system’s certificate store, like your web browser.

  1. Hit Cmd + Space to bring up Spotlight Search, type Keychain Access, and press Enter.
  2. From the File menu, choose Import Items…
  3. Navigate to the certificate file, then click Open.
  4. Right-click the newly-added certificate, and click Get Info from the context menu.
  5. Expand the Trust section.
  6. Select Always Trust for the Secure Sockets Layer (SSL) option.
  7. Close the window. You will be prompted for your password to verify the change.
  8. Restart the Zulip Desktop application.
Section titled “Related articles”