Syslog filled with a lot of certificate errors stating signed by unknown authority

[mmrvelj]

Using SOC 2.3 in the syslog of the system I get messages such as this one

soc launcher[808]: {"caller":"request_queries.go:159","err":"rpc error: code = Unavailable desc = connection error: desc = \"transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate signed by unknown authority\"","method":"RequestQueries","reauth":false,"res":"null","session_pid":808,"severity":"info","took":"29.001µs","ts":"2023-09-19T11:42:56.779072008Z","uuid":"2bbe6bac-48ce-41e4-9964-503764cfe20f"}

New entry such as this one is generated every 5-6 seconds in the syslog.

I would appreciate pointers where to look to fix this issue. We are using self signed certificate for web UI and rest of the certificates are the ones generated by the security onion installation itself.

[mmrvelj]

So, to answer my own question, I got it fixed by adding CA certificates (the ones that signed the web UI (nginx) to /etc/so-launcher/roots.pem. I did not delete original CA, just added additional ones to the file.