I m trying to deploy new fleet environment and I m having a

Question

I m trying to deploy new fleet environment and I m having a trouble with the certificate when I m logging to my web site it s says secured and when I m trying to connect to the fleet with an osquery agent I am getting the error certificate verify failed the agent flag tls server certs is set to the crt file that fleet is using can you help me with this one please

sharvil · Answer

hey < jimmy> are you using orbit

jimmy · Answer

no

sharvil · Answer

is the fleet crt self signed osquery might require the full cert chain iirc

sharvil · Answer

how did you generate the fleet crt

jimmy · Answer

I work in cyber compony that has private crt generetor

jimmy · Answer

I made 2 files for fleet crt file and key file and to osquery flag tls server certs i gave only the the crt file

jimmy · Answer

and yes its self singed

sharvil · Answer

I think that would require either trusting the self signed cert on the host or supplying the full tls cert chain

jimmy · Answer

what do you mean by I think that would require either trusting the self signed cert on the host

jimmy · Answer

and what is the full tls cert chain

jimmy · Answer

I will describe what I did step by step 1 I deployed a fleet pod webserver 2 I created an self singed certificate a crt and key 3 I created an ingress to enable tls termination to the pod with the self singed certificate 4 when I enter to the node that I terminate tls it said that the connection is secured and that the certificate is ok 5 then I tried to connect my osquery agent with the crt file that I created at step 2 and when I run osqueried verbose i get the error certificate verify failed