Client Certificate not updating (regen) after updating the "Custom FQDN"

[jonwelch28323]

Version

2.4.140

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Distributed

Location

airgap

Hardware Specs

Exceeds minimum requirements

CPU

24

RAM

64

Storage for /

500gb

Storage for /nsm

500gb

Network Traffic Collection

span port

Network Traffic Speeds

Less than 1Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

Yes, there are salt failures (please provide detail below)

Logs

No, there are no additional clues

Detail

I did research (Discussion Forums and Docs). I currently have SO installed behind a NAT firewall and was trying to figure out how I could get the certificate to generate with the proper IP and DNS name. Understanding SO does not support just an external IP address I decided to go with the Custom FQDN and after adding the FQDN and then waiting the additional 15-45mins I checked to see if the agent SSL cert updated with the correct DNS information and it has not.

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[InfosecGoon]

Are you trying to connect to the web interface through this NAT boundary, or are you trying to regenerate one of the other certificates?

[jonwelch28323]

I am connecting elastic agents from the wan to SO WAN NAT IP.. I wanted to regenerate the certificates for the Fleet, and out put server to include the external NAT IP.