RUM agent facing Cert Authority Invalid in Browser Tools

[Ong (OCY)]

I set up RUM agent for a React application and am facing ERR_CERT_AUTHORITY_INVALID errors from Developer Tools in the Edge browser. I have set up a self signed cert on my Windows desktop but the error still appears.

The RUM initialisation code is:

import {init as initApm} from '@elastic/apm-rum';

var apm = initApm({
  serviceName: 'web',
  serviceUrl: 'https://xxx.apm.ece.dev.org:9243',
  serviceVersion: '1.0',
  logLevel: 'error',
  environment: 'dev'
)};

When I removed the 9243 port from serviceUrl, the error became ERR_CERT_COMMON_NAME_INVALID.

What can be done to solve this cert error?

Kibana version: 8.5

Elasticsearch version: 8.5

APM Server version: 8.5

APM Agent language and version: RUM 5.14.0

Browser version: Edge

Is there anything special in your setup? There is a Nginx in front of the ECE machines

Errors in browser console (if relevant): ERR_CERT_AUTHORITY_INVALID

Provide logs and/or server output (if relevant):

[Alberto_Delgado]

Hi @Ong,

Thanks for reaching out!

I've been checking your case, and the error you have is not related to the RUM product. The error is taking place because the browser (in this case Edge) doesn't trust the self-signed certificate.

I'm going to share with you two links that highlight how to deal with certificates and why these errors happen.

An excerpt from one of the links:

"One possible cause of this error is that a self-signed certificate is installed on the server. Self-signed certificates aren't trusted by browsers because they are generated by your server, not by a CA. ..."

1. https://www.digicert.com/kb/ssl-support/certificate-not-trusted-error.htm
2. Issuing valid certificates for LAN-only websites | Rafael Cavalcanti

Cheers,
Alberto