CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-19 07:23:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

SSL Module - It's Working

Browse Source
This commit is contained in:
Mike Reeves
2018-07-17 12:52:04 -04:00
parent 4046f5fc00
commit 3870e3cb95
2 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/ca/files/signing_policies.conf
View File

@@ -8,8 +8,6 @@ x509_signing_policies:
- L: Salt Lake City - L: Salt Lake City
- basicConstraints: "critical CA:false" - basicConstraints: "critical CA:false"
- keyUsage: "digitalSignature, nonRepudiation" - keyUsage: "digitalSignature, nonRepudiation"
- extendedkeyUsage: "serverAuth, clientAuth"
- keyUsage: "critical keyEncipherment"
- subjectKeyIdentifier: hash - subjectKeyIdentifier: hash
- authorityKeyIdentifier: keyid,issuer:always - authorityKeyIdentifier: keyid,issuer:always
- days_valid: 3000 - days_valid: 3000

2
salt/ssl/init.sls
View File

@@ -62,7 +62,7 @@ fbcrtlink:
backup: True backup: True
{% endif %} {% endif %}
{% if grains['role'] == 'so-sensor' %} {% if grains['role'] == 'so-SENSOR' %}
# Request a cert and drop it where it needs to go to be distributed # Request a cert and drop it where it needs to go to be distributed
/opt/so/conf/filebeat/etc/pki/filebeat.crt: /opt/so/conf/filebeat/etc/pki/filebeat.crt:
x509.certificate_managed: x509.certificate_managed: