Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

error when querying the ec2_instance_tags table #27905

Open
androbotnik opened this issue Apr 4, 2025 · 0 comments
Open

error when querying the ec2_instance_tags table #27905

androbotnik opened this issue Apr 4, 2025 · 0 comments
Labels
bug Something isn't working as documented #g-orchestration Orchestration product group :incoming New issue in triage process. :reproduce Involves documenting reproduction steps in the issue

Comments

@androbotnik
Copy link

androbotnik commented Apr 4, 2025

Fleet version: orbit version 1.34 and 1.36

Web browser and operating system: Ubuntu 24.04.2 LTS


💥  Actual behavior

orbit shell on an Ubuntu 24 ec2 instance returns the errors below for the table ec2_instance_tags .

osquery> select * from ec2_instance_tags;
W0402 15:21:15.934775 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
W0402 15:21:15.935899 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
W0402 15:21:15.936515 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
W0402 15:21:15.937378 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:15.960234 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:15.960476 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:15.980978 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:16.031558 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:16.055392 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:16.155916 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:16.177047 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:16.377741 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:16.404014 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:16.804490 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:16.830868 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:17.631398 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:17.649761 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:19.250382 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:19.274740 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:22.475419 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:22.501111 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:28.901558 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:28.935401 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed
W0402 15:21:41.736013 18956 tls.cpp:104] Cannot read TLS server certificate(s): /opt/osquery/share/osquery/certs/certs.pem
E0402 15:21:41.760900 18956 aws_util.cpp:429] Exception making HTTP POST request to URL (https://ec2.us-east-1.amazonaws.com): certificate verify failed

The file /opt/osquery/share/osquery/certs.pem does not exist on the system.
the file /opt/orbit/certs.pem does exist on the system.

After manually coping the file /opt/orbit/certs.pem into the the directory opt/osquery/share/osquery/certs/ querying the table ec2_instance_tags returned results with no errors.

🧑‍💻  Steps to reproduce

on ubuntu: sudo orbit shell
select * from ec2_instance_tags

  1. TODO
  2. TODO

🕯️ More info (optional)

N/A

@androbotnik androbotnik added :incoming New issue in triage process. :reproduce Involves documenting reproduction steps in the issue bug Something isn't working as documented labels Apr 4, 2025
@iansltx iansltx added the #g-orchestration Orchestration product group label Apr 5, 2025
@lukeheath lukeheath moved this to Ready in 🚦 Traffic Apr 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working as documented #g-orchestration Orchestration product group :incoming New issue in triage process. :reproduce Involves documenting reproduction steps in the issue
Projects
Status: Ready
Development

No branches or pull requests

2 participants