SSL encryption for active checks and proxy communication

[karanpreetsingh1990]

Hello,

I've recently set up a new environment and we're going to be monitoring a large infrastructure with this. I'm trying to set up SSL certificate based configuration to make sure the traffic is encrypted.

We're almost completely using Active checks and from it looks like, we'll have to have a cert on each agent to get that completely secure.

Having a cert on each agent and getting it signed by a CA isn't really feasible, is there a way around this that still permits secure communication without having to put a separate certificate on each server?

Thanks,
Karan

[karanpreetsingh1990]

I was able to get this sorted by using PSK files. That's the only reasonable way I could find to use encryption from agent to proxy/server.