https://github.com/osquery/osquery logo
Title
h

Heather

05/10/2021, 12:27 PM
Is there any way to utilize a self-signed cert when testing using the fleet preview? (I'm new to osquery and fleet...)
n

Noah Talerman

05/10/2021, 2:43 PM
Hi @Heather, welcome to Fleet and osquery! Are you attempting to enroll a host to the fleet preview environment? If so, you have several options. One is to use Orbit osquery which is an osquery runtime and autoupdater. See the Packaging section of the Orbit docs for instructions on generating an package that you can install on your hosts(s). To utilize a self-signed certificate, you’ll have to specific the 
--fleet-certificate
 option. If you want to use regular (base) osquery, you’ll have to specify the
--tls_server_certs
flag when starting up osqueryd. This flag specifies the path to the full certificate chain used by the server. Check out the Remotely interfacing osquery docs for more info on this flag.
m

mikermcneil

05/11/2021, 5:04 PM
@Heather PS if you're looking for a simple way to access Fleet in preview mode, you can do so on http://localhost:1337 without the cert, for preview purposes. Some more troubleshooting info, if you need it (though it should just work™ as of the most recent couple of versions of Fleet): https://github.com/fleetdm/fleet/issues/748