# Open Telemetry Java agent with Elastic APM - verify\_server\_cert=false

**URL:** <https://discuss.elastic.co/t/open-telemetry-java-agent-with-elastic-apm-verify-server-cert-false/372980>\
**Category:** APM\
**Tags:** java\
**Created:** [January 9, 2025, 8:51am UTC](https://discuss.elastic.co/t/open-telemetry-java-agent-with-elastic-apm-verify-server-cert-false/372980 "2025-01-09T08:51:43Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dave.richards](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dave.richards](https://discuss.elastic.co/u/dave.richards)\
**Post date:** [January 9, 2025, 8:51am UTC](https://discuss.elastic.co/t/open-telemetry-java-agent-with-elastic-apm-verify-server-cert-false/372980/1 "2025-01-09T08:51:43Z")

</div>

Hi

Does anyone know what the equivalent setting for verify\_server\_cert=false is in Open Telemetry Java Agent config ?

We want to run an OTEL Java agent without certs in place but cannot find any documentation that clearly identifies what that equivalent OTEL -D flag should be

Thanks

---

<div class="post-metadata">

**Author:** ![Jack\_Shirazi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jack_shirazi/32/91641_2.png) [@Jack\_Shirazi](https://discuss.elastic.co/u/Jack_Shirazi)\
**Post date:** [January 9, 2025, 12:33pm UTC](https://discuss.elastic.co/t/open-telemetry-java-agent-with-elastic-apm-verify-server-cert-false/372980/2 "2025-01-09T12:33:41Z")

</div>

I don't think the OTEL Java agent has this option. You can either setup a EDOT collector with insecure\_skip\_verify=true and use that as your endpoint or add self certs to your certstore. [Here's a possibly useful discussion](https://github.com/open-telemetry/opentelemetry-java-instrumentation/issues/6609)

---

<div class="post-metadata">

**Author:** ![dave.richards](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@dave.richards](https://discuss.elastic.co/u/dave.richards)\
**Post date:** [January 9, 2025, 12:58pm UTC](https://discuss.elastic.co/t/open-telemetry-java-agent-with-elastic-apm-verify-server-cert-false/372980/3 "2025-01-09T12:58:52Z")

</div>

Thanks Jack, I think you're correct. I cant find anything documented anywhere to indicate how this could be achieved at the java agent level, so I think we will have to instruct our users to set up the keystore. I just asked here as the last resort, thanks anyway