diff --git a/octavia/certificates/common/auth/barbican_acl.py b/octavia/certificates/common/auth/barbican_acl.py
index 39b250fabe..c86fc04d38 100644
--- a/octavia/certificates/common/auth/barbican_acl.py
+++ b/octavia/certificates/common/auth/barbican_acl.py
@@ -87,7 +87,9 @@ class BarbicanACLAuth(barbican_common.BarbicanAuth):
         user_auth = token.Token(auth_url=service_auth.auth_url,
                                 token=context.auth_token,
                                 project_id=context.project_id)
-        user_session = session.Session(auth=user_auth)
+        user_session = session.Session(
+            auth=user_auth,
+            verify=CONF.certificates.ca_certificates_file)
 
         # create a special barbican client with our user's session
         return barbican_client.Client(
diff --git a/releasenotes/notes/fix-barbican-client-verfiy-689be1b9389bd1d8.yaml b/releasenotes/notes/fix-barbican-client-verfiy-689be1b9389bd1d8.yaml
new file mode 100644
index 0000000000..4943ac2350
--- /dev/null
+++ b/releasenotes/notes/fix-barbican-client-verfiy-689be1b9389bd1d8.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fix an issue when the barbican service enable TLS, we create the listerner
+    failed.