Ok new piece of 'moving parts' we need to address within 8 days. The DigiCert TLS cert for *.osquery.io needs to be renewed. We should move over to LetsEncrypt and we'll need to use the cert within AWS CloudFront.Also I think we can move off of CloudFront and onto a free (if available) load balancer that allows us to TLS terminate. We front the homepage and pkg. IIRC.
04/27/2020, 10:49 PM
Just checking, did anyone address this or is it about to become a problem?
04/28/2020, 2:47 AM
thanks for following up, they should be using Amazon certs as of a few hours ago