@Fern, does the content of

./tools/tests/ca-crt.pem

represent the public certificate for your web server?

Nope lol

Np. Still probably "nope". 🙂

Hi @Dennis - no it does not. Was confused as to whether or not it should.

@Fern, sorry for the delayed response. That file should contain the full public certificate chain so that Osquery can validate the TLS connection. One easy way to get the public certificate(s) is to browse to the EC2 FQDN in Chrome and export it from there. Hope that helps.

Thanks Dennis! Will try that.