Everything installs except Velociraptor about detectionlab

[Varjack]

I have managed to solve this issue. In the logger box cd into /opt/velociraptor and create a new server and client package as outlined in the velociraptor instructions (https://docs.velociraptor.app/docs/deployment/).

Once done you will have a server.config.yaml and a client.config.yaml in the logger. you will be able to start the server from logger (see link above). Then simply replace the existing client.config.yaml files on dc, wef and win10 with the new one generated and restart the velociraptor service on each box. Then you will see these endpoints in the velociraptor GUI.

[jgoosey]

https://docs.velociraptor.app/knowledge_base/tips/rolling_certificates/

sudo ./opt/velociraptor/velociraptor -c /opt/velociraptor/server.config.yaml config rotate_key > /tmp/server.config.yaml

sudo mv /opt/velociraptor/server.config.yaml /opt/velociraptor/server.config.yaml.bak

sudo mv /tmp/server.config.yaml /opt/velopciraptor/

sudo ./opt/velociraptor/velociraptor -c /opt/velociraptor/server.config.yaml debian server

sudo dpkg -i /opt/velociraptor/velociraptor_server*.deb

The post_build_check script fails for "could not create secure SSL/TLS" but at least it's reachable in browser and maintains through reboot 🤷

Oh and then you'll have to make a new client config (resources/velociraptor/Velociraptor.config.yaml):
sudo ./opt/velociraptor/velociraptor -c /opt/velociraptor/server.config.yaml config client > /vagrant/resources/velociraptor/Velociraptor.config.yaml

[Varjack]

I have experienced the same issue. I was able to get Velociraptor working again by remaking the server.config file but was unable to get the hosts to come back up. Were you able to resolve this?

[dembarthe]

Experiencing same issue (same setup), I checked the logs of velociraptor (/var/log/syslog) after systemctl start velociraptor_server and it seems to be a certificate issue "certificate has expired or is not yet valid: current time 2023-05-30 is after 2023-04-28".

I'd shot an issue in the line 155 of server.config.yaml, the certificate is up to 28 of April 2023.

[tridentholder]

@Varjack @n0tspam guys ,have any fix for this. when I tried the make command ,I got this

[shyampvagadiya]

How do I update the certificate (server.config.yaml)?

[n0tspam]

@jgoosey's response worked for me. You do still get the error, but velociraptor is accessible. Thank you.