# Insecure param does not complete disable verification

**URL:** https://discuss.elastic.co/t/insecure-param-does-not-complete-disable-verification/334673
**Category:** Beats
**Tags:** elastic-stack-security, fleet
**Created:** [May 30, 2023, 10:49am UTC](https://discuss.elastic.co/t/insecure-param-does-not-complete-disable-verification/334673 "2023-05-30T10:49:43Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![kmahyyg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kmahyyg/32/101753_2.png) [@kmahyyg](https://discuss.elastic.co/u/kmahyyg)
#### Post date: [May 30, 2023, 10:49am UTC](https://discuss.elastic.co/t/insecure-param-does-not-complete-disable-verification/334673/1 "2023-05-30T10:49:44Z")

</div>

I use `--insecure` when enrolling agent into fleet server in development environment. With some unable-to-say restrictions, this development environment cannot connect to CRL server.

However, in current environment, the `curl -v https://my-server:8220/api/status` returns fine on unix OS, since they does NOT check CRL on connection establishment. The certificate and CA are already trusted on OS level.

In windows, even I disabled CRL check in Internet Settings and rebooted, the curl will still give me this error: `schannel: next InitializeSecurityContext failed: Unknown error (0x80092013) - The revocation function was unable to check revocation because the revocation server was offline.`

Since the elastic-agent and elastic-defend are using Golang/libcurl (in cpp) and do NOT give that detailed information, I've managed to find the root cause using a lot of time.

Please also set `--insecure` to disable OCSP and CRL check, thanks.

Update: After I generated a new certificate (all CA and this certificate does NOT contains a CRL or OCSP endpoint) in a new environment, the error goes to 0x80092012 instead.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 27, 2023, 12:50pm UTC](https://discuss.elastic.co/t/insecure-param-does-not-complete-disable-verification/334673/2 "2023-06-27T12:50:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.