Skip to content
This repository has been archived by the owner on Sep 20, 2023. It is now read-only.

Better Describe Proxy Scenarios #46

Open
TheDr1ver opened this issue Sep 25, 2019 · 0 comments
Open

Better Describe Proxy Scenarios #46

TheDr1ver opened this issue Sep 25, 2019 · 0 comments

Comments

@TheDr1ver
Copy link

I just spent the better part of 2 hours trying to figure this out and didn't see it anywhere in the documentation, so I'm putting it here in the hopes that it might help someone else going forward.

If your Cortex analyzer is behind a proxy that is utilizing a custom certificate (e.g. for SSL-Breakout) the "CA Certs" field in the analyzer options does NOT accept a

-----BEGIN CERTIFICATE------
<base_64_blob>
-----END` CERTIFICATE-----  

Instead, you need to add that blob to a file (in my case I added it to /opt/Cortex-Analyzers/certs/cacert.pem) and you must then put that full path in the "CA Certs" field of the configuration.

If you don't do this and you're utilizing SSL Breakout you'll continue to get an HTTPSConnectionPool Error - SSLError - CERTIFICATE_VERIFY_FAILED

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant