CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

SSL and CA Modules - Add to master

Browse Source
This commit is contained in:
Mike Reeves
2018-05-24 10:32:55 -04:00
parent ee2d5b37b4
commit 019d341de3
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
salt/ssl/init.sls
View File

@@ -6,16 +6,18 @@
x509.pem_managed: x509.pem_managed:
- text: {{ salt['mine.get']('ca', 'x509.get_pem_entries')['ca']['/etc/pki/ca.crt']|replace('\n', '') }} - text: {{ salt['mine.get']('ca', 'x509.get_pem_entries')['ca']['/etc/pki/ca.crt']|replace('\n', '') }}
# Request a cert # Request a cert and drop it where it needs to go to be distributed
/etc/pki/filebeat.crt: /etc/pki/filebeat.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: ca - ca_server: ca
- signing_policy: filebeat - signing_policy: filebeat
- public_key: /etc/pki/filebeat.key - public_key: /etc/pki/filebeat.key
- CN: www.example.com - CN: security.onion
- days_remaining: 3000 - days_remaining: 3000
- backup: True - backup: True
- managed_private_key: - managed_private_key:
name: /etc/pki/filebeat.key name: /etc/pki/filebeat.key
bits: 4096 bits: 4096
backup: True backup: True
# Create Symlinks to the keys so I can distribute it to all the things

2
salt/top.sls
View File

@@ -16,6 +16,8 @@ base:
- common - common
- master - master
- idstools - idstools
- ca
- ssl
- redis - redis
- elasticsearch - elasticsearch
- logstash - logstash