another question please @groob, I still have trouble in understand what do you mean by signed the certificate, is the 3 commands below should do the trick or I need to do other stuff not mentionned in the fleet-on-ubuntu.md

$ openssl genrsa -out /tmp/server.key 4096
$ openssl req -new -key /tmp/server.key -out /tmp/server.csr
$ openssl x509 -req -days 366 -in /tmp/server.csr -signkey /tmp/server.key -out /tmp/server.cert

you need to provide us with logs from osquery first