Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Try to remove tls.verify false in Fluent Bit configs #79

Open
PettitWesley opened this issue Jun 22, 2023 · 0 comments
Open

Try to remove tls.verify false in Fluent Bit configs #79

PettitWesley opened this issue Jun 22, 2023 · 0 comments

Comments

@PettitWesley
Copy link
Contributor

Currently we have tls.verify false in FLB configs, which will probably eventually get us a security warning.

As part of this change I tried to change it to true, but this didn't work: #78

Mountebank works building cert at container build time.

Trying to get Fluent Bit to use the cert does not:

[2023/06/22 22:45:59] [error] [tls] crt_file '/cert/mb-csr.pem' 336445449: error:0909006C:PEM routines:get_name:no start line
Despite this error it is formatted properly:

bash-5.2# cat mb-csr.pem
-----BEGIN CERTIFICATE REQUEST-----
So we will keep tls.verify false for now.

The internet suggests that some newline formatting might be the problem, since everything is on linux and there's a single newline between the header and the actual cert, I think that can't be the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant