https://github.com/osquery/osquery logo
d

Dennis

03/14/2018, 9:02 PM
@Fern, does the content of
./tools/tests/ca-crt.pem
represent the public certificate for your web server?
t

theopolis

03/15/2018, 2:21 AM
Nope lol
Oh sorry, I missed some context hehe
d

Dennis

03/15/2018, 2:23 AM
Np. Still probably "nope". 🙂
f

Fern

03/15/2018, 9:37 AM
Hi @Dennis - no it does not. Was confused as to whether or not it should.
d

Dennis

03/15/2018, 1:17 PM
@Fern, sorry for the delayed response. That file should contain the full public certificate chain so that Osquery can validate the TLS connection. One easy way to get the public certificate(s) is to browse to the EC2 FQDN in Chrome and export it from there. Hope that helps.
f

Fern

03/15/2018, 1:17 PM
Thanks Dennis! Will try that.
7 Views