topic Re: Intelligence Stream Update x509 error in Prisma Cloud Discussions

Intelligence Stream Update x509 error

cm-patterson — Tue, 30 Jul 2024 16:38:37 GMT

Prisma Cloud Compute Edition

30 & 32

Error:

route_handler.go:11205 Failed to get latest intelligence version Get "https://intelligence.twistlock.com/api/v1/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

This has been an ongoing issue on multiple instances. This dates back several major versions. Our workaround has been to use the twistcli to update them instead. I'd like to get this working natively instead of using a jenkins job.

What certificate, exactly, is it complaining about? Is there a fix for this?

Re: Intelligence Stream Update x509 error

kkaukuntla — Fri, 02 Aug 2024 22:53:11 GMT

Hello,

Thank you for reaching out through the Live Community.

To better understand your setup, could you clarify how the console connects to https://intelligence.twistlock.com? Is it through a direct internet route, or is there a proxy in between?

According to the documentation here - Prisma Cloud Proxy Configuration - if you are using a TLS intercept proxy, it may interfere with the Console’s ability to connect to external services because the Console cannot verify the proxy’s certificate. To resolve this, you need to provide the CA certificates that the Console can trust. Please review the Proxy configuration documentation for more details.

Please let us know if you are not using a proxy and are still experiencing the issue.

Re: Intelligence Stream Update x509 error

cm-patterson — Wed, 11 Dec 2024 22:04:39 GMT

Hi,

It's a direct connection.

Re: Intelligence Stream Update x509 error

mandrade — Thu, 02 Jan 2025 15:55:07 GMT

I suggest you to open a support ticket for it, so they can investigate your tenant and see what is wrong, catch the logs and so on