Literally just seeing if it can be done. I’ve got everything working with vms…but this:

sudo osqueryd --verbose --pidfile /tmp/osqueryd.pid --database_path /tmp/osquery.db/ --tls_hostname <my aws ec2 FQD> --tls_server_certs ./tools/tests/ca-crt.pem --config_plugin tls --config_tls_endpoint /config --logger_tls_endpoint /logger --logger_plugin tls --enroll_tls_endpoint /enroll --tls_dump

fails the cert every time.