CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix SSL perms

Browse Source
This commit is contained in:
Mike Reeves
2020-08-10 21:44:45 -04:00
parent cf5c29d01c
commit 08d544e527
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
salt/ssl/init.sls
View File

@@ -216,7 +216,8 @@ miniokeyperms:
- mode: 640 - mode: 640
- group: 939 - group: 939
/etc/pki/redis.key: # Create a cert for elasticsearch
/etc/pki/elasticsearch.key:
x509.private_key_managed: x509.private_key_managed:
- CN: {{ manager }} - CN: {{ manager }}
- bits: 4096 - bits: 4096
@@ -224,12 +225,11 @@ miniokeyperms:
- days_valid: 820 - days_valid: 820
- backup: True - backup: True
- new: True - new: True
{% if salt['file.file_exists']('/etc/pki/redis.key') -%} {% if salt['file.file_exists']('/etc/pki/elasticsearch.key') -%}
- prereq: - prereq:
- x509: /etc/pki/redis.crt - x509: /etc/pki/elasticsearch.crt
{%- endif %} {%- endif %}
# Create a cert for elasticsearch
/etc/pki/elasticsearch.crt: /etc/pki/elasticsearch.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: {{ ca_server }} - ca_server: {{ ca_server }}
@@ -249,9 +249,10 @@ ealstickeyperms:
- replace: False - replace: False
- name: /etc/pki/elasticsearch.key - name: /etc/pki/elasticsearch.key
- mode: 640 - mode: 640
- group: 939 - group: 930
/etc/pki/elasticsearch.key: # Create a cert for Redis encryption
/etc/pki/redis.key:
x509.private_key_managed: x509.private_key_managed:
- CN: {{ manager }} - CN: {{ manager }}
- bits: 4096 - bits: 4096
@@ -259,12 +260,11 @@ ealstickeyperms:
- days_valid: 820 - days_valid: 820
- backup: True - backup: True
- new: True - new: True
{% if salt['file.file_exists']('/etc/pki/elasticsearch.key') -%} {% if salt['file.file_exists']('/etc/pki/redis.key') -%}
- prereq: - prereq:
- x509: /etc/pki/elasticsearch.crt - x509: /etc/pki/redis.crt
{%- endif %} {%- endif %}
# Create a cert for the docker registry
/etc/pki/redis.crt: /etc/pki/redis.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: {{ ca_server }} - ca_server: {{ ca_server }}