Skip to content

Instantly share code, notes, and snippets.

@zeraf29
Last active May 16, 2023 02:15
Show Gist options
  • Save zeraf29/dbaf727595ae597989649ba6b704dc06 to your computer and use it in GitHub Desktop.
Save zeraf29/dbaf727595ae597989649ba6b704dc06 to your computer and use it in GitHub Desktop.
Setting SSL verification for Fluentd on Windows(td-agent) with security network

Setting SSL verification for Fluentd on Windows(td-agent) with security network

Normaly you don't have to set this contents.
But if you install Fluentd on Windows(td-agent) with security network like company network, you will meet ssl verification error.
These are setting ways for that situation.
  1. get your security network's ssl verfication file (pem, crt, cer ...)

    • if you don't have pem file, change from crt or cer to pem. (you can find a way on google)
  2. move to td-agent's rubygems-ssl_certs path and make a verification

    • normally, td-agent is installed on c:\opt\td-agent
    • move to rubygems\ssl_certs path (ex: C:\opt\td-agent\lib\ruby\2.7.0\rubygems\ssl_certs)
    • make a folder which your security network's domain ( ex: aaa.com)
    • paste/move a your network's ssl verfication pem file to there
  3. install msys64

    • run c:\opt\td-agent\bin\ridk.cmd install and select 1
    • if you get some error, maybe you have to install msys2 manually(ex: msys2-x86_64-20221028.exe)
      • you can check on error message about where you can download it
    • After install msys64, move to usr\ssl\certs path (ex: C:\msys64\usr\ssl\certs)
    • Then, edit ca-bundle.crt, ca-bundle.trust.crt
      • open them by notepad
      • paste your ssl verfication file's content to end of each file's inside
    • again run c:\opt\td-agent\bin\ridk.cmd install, and select 2 (update system)
    • after that, do again ca-bundle.crt, ca-bundle.trust.crt (cause there are reseted after update system)
    • again run c:\opt\td-agent\bin\ridk.cmd install, and select 3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment