Does anyone know of a way to get osquery to connect to a local tls endpoint without having to compile the binary with the

--tls_allow_unsafe

option turned on?

Use

--tls_server_certs

with osquery

hmm…. i’ll try that option. that assumes that the certificate is on the same machine though

Yes. Typically you package the necessary certs with the osquery install.

gotcha. My scenario is that I’m just running locally with a self-signed cert. any production installs will have valid certs on their TLS endpoints