[x509_cert] add authority to telegraf container

Telegraf
1

Hi,

We have our own authority to generate our certificates.

We use the telegraf:1.23.4 from docker hub.

Our config is :

[[inputs.x509_cert]]
  sources= ["https://vault.mydomain.tld:443"]

Our results are :

[...] verification="invalid",verification_error="x509: certificate signed by unknown authority"}

We tried to add our authority in /usr/local/share/ca-certificates/ and update with /usr/sbin/update-ca-certificates but still unkown authority.

Any idea ?

EDIT :

On docker container :

$ openssl s_client -servername vault.mydomain.tld-connect vault.mydomain.tld:443

Succed with no error validating certificates

2

My bad ! I just needed to rename .cer to .crt and all work better now !

1 Like