https://github.com/osquery/osquery logo
Title
e

Erich Stoekl

04/09/2020, 8:19 PM
Does Fleet need to be running with
server_tls
set to
true
in order to allow osquery clients to connect to it?
s

seph

04/09/2020, 8:39 PM
I’d bet not. Did you move fleet behind an SSL terminating load balancer and things don’t work? What error does launcher produce?
(or is this osquery? Same question though)
z

zwass

04/09/2020, 8:52 PM
Osquery will refuse to connect over non-TLS, so Fleet or an LB must be terminating TLS. You can use a self signed cert though. Just pass the full cert chain to osquery with
--tls_server_certs
.
e

Erich Stoekl

04/09/2020, 9:29 PM
Thanks!!