CVE CloudProxy. SL Certificate Cannot Be Trusted The SSL certificate for this service cannot be trusted.

Products

• DX Operational Observability

Issue/Introduction

During vulnerability scanning "CVE CloudProxy. SL Certificate Cannot Be Trusted The SSL certificate for this service cannot be trusted" has been found.

Cause

APM Self signed certificate was involved.

Resolution

Uncomment the properly shown below in application.yml and set it to false ir order to use custom certificates, like below:
apm.server.useSelfSignedCert: false

For more details about the setup refer to the documentation.