# Bug? Heartbeat Browsermonitoring ignoring SSL settings?
**URL:** https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943
**Category:** Beats
**Tags:** docker, heartbeat
**Created:** [July 29, 2021, 7:26am UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943 "2021-07-29T07:26:46Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)
#### Post date: [July 29, 2021, 7:26am UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943/1 "2021-07-29T07:26:46Z")
Hello all,
I am currently setting up the new Browser Monitoring feature for synthetic checks since this is a great new feature.
I use heartbeat in docker.
I try to ping an internal site in my network. The error message is pretty clearly saying that he doesn't know the ssl:
```auto
error executing step: Error: page.goto: net::ERR_CERT_AUTHORITY_INVALID at https://user:pass@mysite.company.com
```
Trying now to fix this issue by either setting
`ssl.verification_mode: none`
or
```auto
ssl:
certificate_authorities: ['/etc/ca.crt']
supported_protocols: ["TLSv1.0", "TLSv1.1", "TLSv1.2"]
```
in heartbeat.yml seems like to not affect it at all. Doing it with for example the http module works fine.
Also by usign the ca cert i changed my docker-compose file to mount the ca file to /etc/ca.crt and gave it permissons to read with chmod.
Is this a bug or am I just doing something wrong?
Full heartbeat yml:
```auto
name: "myhost"
heartbeat.monitors:
- type: browser
id: my-monitor
name: My Monitor
#ssl.verification_mode: none
ssl:
certificate_authorities: ['/etc/ca.crt']
supported_protocols: ["TLSv1.0", "TLSv1.1", "TLSv1.2"]
schedule: "@every 20s"
source:
inline:
script: |-
step("load homepage", async () => {
await page.goto('https://user:pass@mysite.company.com');
});
setup.ilm.enabled: auto
setup.ilm.rollover_alias: "heartbeat"
setup.ilm.pattern: "000001"
output.elasticsearch:
hosts: ["https://elasticsearch:9200"]
username: "beats_writer"
password: " *******************"
ssl.verification_mode: none
```
If anyone has a guess, I am looking forward to any ideas! 🙂
Thanks and greetings
Simon
---
### Author:  [@Andrew\_Cholakian1](https://discuss.elastic.co/u/Andrew_Cholakian1)
#### Post date: [August 2, 2021, 10:27pm UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943/2 "2021-08-02T22:27:03Z")
Hi Simon, sorry to hear you've hit a rough spot here, but thanks for the kind words! I think we could do better here and have opened [[Heartbeat] `ssl.verification_mode_none` should work for browsers · Issue #27202 · elastic/beats · GitHub](https://github.com/elastic/beats/issues/27202) to tackle this.
In the meantime, we do have a workaround in our latest synthetics versions, but its only in our 7.14 docs!
The browser monitors don't use the same TLS settings since it's really chromium. The best workaround right now is documented [here](https://www.elastic.co/guide/en/observability/7.14/synthetics-configuration.html#synthetics-config-file). Notice the `ignoreHttpsErrors` option.
You'll need to make sure your NPM project is running the latest version of the synthetics library as well, so check your package.json to make sure it's not locked to an older version.
---
### Author:  [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)
#### Post date: [August 4, 2021, 10:48am UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943/3 "2021-08-04T10:48:08Z")
Hi Andrew,
thanks! That explains my issue perfectly. I'll use the workaround until the issue is resolved.
Greetings
Simon
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 1, 2021, 12:48pm UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943/4 "2021-09-01T12:48:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.