[timelion] > unable to verify the first certificate

[Matt_Vasquez]

While working with Canvas using the "[eCommerce] Revenue Tracking" template Workpad. The embedded timelion visualization are throwing errors and showing a exclamation point graphic.

When I click on the error graphic is displays the following:

Whoops! Expression failed
Expression failed with the message:

[timelion] > unable to verify the first certificate

{
"error": {
"stack": "Error: unable to verify the first certificate
at TLSSocket.<anonymous> (_tls_wrap.js:1105:38)
at emitNone (events.js:106:13)
at TLSSocket.emit (events.js:208:7)
at TLSSocket._finishInit (_tls_wrap.js:639:8)
at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:469:38)",
"message": "[timelion] > unable to verify the first certificate"
}
}

I understand Canvas is in beta but this seems like a timelion issue with TLS. I am using a specified CA for TLS via HTTP and Transport layers across all of the Elastic Stack. From researching this error it seems to be specific from Node.js. I have double checked that the certificate chain is present in the CA PEM file which is set in all of the configs across elastic stack:

xpack.security.http.ssl.certificate_authorities: E:/Elastic Stack\Elasticsearch\config\certs
ootca.pem
xpack.security.transport.ssl.certificate_authorities: E:\Elastic Stack\Elasticsearch\config\certs
ootca.pem

[Larry_Gregory]

Hey @Matt_Vasquez,

Sorry you're having trouble with Canvas. I do believe this is a bug on our side, so I've opened https://github.com/elastic/kibana/issues/26308 to track progress and alert the Canvas team.

[Matt_Vasquez]

@Larry_Gregory I was able to fix this issue by exporting an environment variable named
NODE_EXTRA_CA_CERTS pointing to my CA certificate file path