Linux EDR - Enterprise Networking Errors

Issue

Linux EDR Enterprise Networking has been enabled but sensor is not communicating or sending telemetry. Outpost errors seen in cf_system_log.csv.

Error encountered while invoking functor in InvokeIfConnected::invoke. It's probably just transient network failure. Context: Runtime failure: Error uploading to External Outpost: error sending request for url (https://cwp-ingest.redcanary.io/cwp-backend/v1/upload/[...]: error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1915: (certificate has expired)|component=utilities::net::InvokeIfConnected

Environment

Red Canary Linux EDR

Resolution

There is not a resolution for this issue at this time, but as a workaround, disable Enterprise Networking to switch back to Standard Networking and notice Last Activity updating.

Note: After editing config.json, make sure to remove any trailing commas at the end of the file and manually restart the agent.