Hello Can someone help me I am doing a test installation of

Question

Hello Can someone help me I am doing a test installation of Kolide Fleet via docker images fleet mysql redis mailhog When I press on Fetch Kolide Certificate nothing happens and I see the 500 error on browser console How can I fix the error

jackjack · Answer

Hi do you have a certificate

jackjack · Answer

if you have already assigned a self signed certs maybe download that directly into your machine instead of downloading it form the GUI

Konstantin · Answer

Hi Yes I have a certificate But when I try to run an agent with it there is the error ```vi etc osquery kolide flags enroll secret path= etc osquery enrollment secret tls server certs= etc osquery kolide bankrc local 8412 pem tls hostname=kolide bankrc local 8412 tls dump=true host identifier=hostname enroll tls endpoint= api v1 osquery enroll config plugin=tls config tls endpoint= api v1 osquery config config tls refresh=10 disable distributed=false distributed plugin=tls distributed interval=10 distributed tls max attempts=3 distributed tls read endpoint= api v1 osquery distributed read distributed tls write endpoint= api v1 osquery distributed write logger plugin=tls logger tls endpoint= api v1 osquery log logger tls period=10 ``` ```osqueryd flagfile= etc osquery kolide flags W0318 07 05 24 202896 13491 tls enroll cpp 66 Failed enrollment request to <https kolide bankrc local 8412 api v1 osquery enroll> Request error certificate verify failed retrying ```

Konstantin · Answer

I unchecked Verify SSL Certs option in Fleet app settings

Konstantin · Answer

commands for generate the certificate ```root hq oib3 opt fleet openssl genrsa out pki tls certs server key 2048 Generating RSA private key 2048 bit long modulus +++ +++ e is 65537 0x010001 root hq oib3 opt fleet openssl rsa in pki tls certs server key out pki tls private server key writing RSA key root hq oib3 opt fleet openssl req sha256 new key pki tls private server key out pki tls certs server csr subj CN=kolide bankrc local root hq oib3 opt fleet openssl x509 req sha256 days 365 in pki tls certs server csr signkey pki tls private server key out pki tls certs server crt Signature ok subject=CN = kolide bankrc local Getting Private key```

Konstantin · Answer

Error 500 fixed when I switched back to ip address instead of dns in etc hosts