Intelligence Stream Update x509 error

[cm-patterson]

Prisma Cloud Compute Edition

30 & 32

Error:

route_handler.go:11205 Failed to get latest intelligence version Get "https://intelligence.twistlock.com/api/v1/version": tls: failed to verify certificate: x509: certificate signed by unknown authority

This has been an ongoing issue on multiple instances.  This dates back several major versions.  Our workaround has been to use the twistcli to update them instead.  I'd like to get this working natively instead of using a jenkins job.

What certificate, exactly, is it complaining about?  Is there a fix for this?

[kkaukuntla]

Hello,

Thank you for reaching out through the Live Community.

To better understand your setup, could you clarify how the console connects to https://intelligence.twistlock.com? Is it through a direct internet route, or is there a proxy in between?

According to the documentation here - Prisma Cloud Proxy Configuration - if you are using a TLS intercept proxy, it may interfere with the Console’s ability to connect to external services because the Console cannot verify the proxy’s certificate. To resolve this, you need to provide the CA certificates that the Console can trust.  Please review the Proxy configuration documentation for more details.

Please let us know if you are not using a proxy and are still experiencing the issue.

[cm-patterson]

Hi,

It's a direct connection.