X509: certificate signed by unknown authority

Elastic Stack Beats
1

Hi All,

Hearbeat version - 8.14.1

The certificate is updated for the specific URL, still in Uptime monitor we are getting the error x509: certificate signed by unknown authority. I can confirm that the CHain of the certificate got changed and that was also updated.

When I externally did the GET "url", I got the status 200 Ok.
Is there internally in the heartbeat its checking the authenticity using the old chain?

2

Hi @madhavsankarg

It is not clear which URL you are referring to the URL to Elasticsearch, A monitoring URL perhaps share your configurations heartbeat.yml and monitors config

3

Hi @stephenb,

The URL was an internal application url, which was monitored using the Uptime in Kibana. That was showing the above error.

Solution
The node were heartbeat is setup the trust certificates were not updated. This related to the issue of the new certificate chain getting authenticated by the heartbeat. SO just need to update the Trust certificate in the node.