diff --git a/pkg/cloud/openstack/clients/machineservice.go b/pkg/cloud/openstack/clients/machineservice.go
index 8f414be163..eb66470e8f 100644
--- a/pkg/cloud/openstack/clients/machineservice.go
+++ b/pkg/cloud/openstack/clients/machineservice.go
@@ -191,7 +191,7 @@ func NewInstanceServiceFromCloud(cloud clientconfig.Cloud, cacert []byte) (*Inst
 		config.RootCAs = caCertPool
 	}
 
-	config.InsecureSkipVerify = *cloudFromYaml.Verify
+	config.InsecureSkipVerify = !*cloudFromYaml.Verify
 	transport := &http.Transport{Proxy: http.ProxyFromEnvironment, TLSClientConfig: config}
 	provider.HTTPClient.Transport = transport
 
diff --git a/pkg/cloud/openstack/cluster/actuator.go b/pkg/cloud/openstack/cluster/actuator.go
index 167b51f277..a65ede53ff 100644
--- a/pkg/cloud/openstack/cluster/actuator.go
+++ b/pkg/cloud/openstack/cluster/actuator.go
@@ -247,7 +247,7 @@ func (a *Actuator) getNetworkClient(cluster *clusterv1.Cluster) (*gophercloud.Se
 		config.RootCAs = caCertPool
 	}
 
-	config.InsecureSkipVerify = *cloudFromYaml.Verify
+	config.InsecureSkipVerify = !*cloudFromYaml.Verify
 	transport := &http.Transport{Proxy: http.ProxyFromEnvironment, TLSClientConfig: config}
 	provider.HTTPClient.Transport = transport