https://github.com/osquery/osquery logo
Title
g

Gavin

08/19/2019, 9:10 PM
CN should be
foo.host.domain
where cert is
*.host.domain
h

harveywells

08/20/2019, 2:18 PM
Does cert order matter?
I think we did this with a Vault issued certificate (internal PKI) and it was leaf, then issuing CA.
We are now using a Digicert cert and have an intermediate cert too.
g

Gavin

08/20/2019, 10:29 PM
yes
h

harveywells

08/21/2019, 8:22 PM
@Gavin thank you so much for your help and sharing those resources. I was able to switch out the certs with little effort
🤜 🤛
g

Gavin

08/21/2019, 8:34 PM
Awesome