CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #11831 from Security-Onion-Solutions/TOoSmOotH-patch-3

Browse Source 
Update signing_policies.conf
This commit is contained in:
Mike Reeves
2023-11-20 15:19:42 -05:00
committed by GitHub
parent 3b8d1d470e fee9b61ce9
commit 3b133e87cd
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
salt/ca/files/signing_policies.conf
View File

@@ -37,7 +37,7 @@ x509_signing_policies:
- ST: Utah - ST: Utah
- L: Salt Lake City - L: Salt Lake City
- basicConstraints: "critical CA:false" - basicConstraints: "critical CA:false"
- keyUsage: "critical keyEncipherment" - keyUsage: "critical keyEncipherment digitalSignature"
- subjectKeyIdentifier: hash - subjectKeyIdentifier: hash
- authorityKeyIdentifier: keyid,issuer:always - authorityKeyIdentifier: keyid,issuer:always
- extendedKeyUsage: serverAuth - extendedKeyUsage: serverAuth

7
salt/common/tools/sbin/soup
View File

@@ -775,8 +775,11 @@ post_to_2.3.270() {
} }
post_to_2.3.280() { post_to_2.3.280() {
echo "Nothing to do for .280" salt-call state.apply ca queue=True
stop_salt_minion
mv /etc/pki/managerssl.crt /etc/pki/managerssl.crt.old
mv /etc/pki/managerssl.key /etc/pki/managerssl.key.old
systemctl_func "start" "salt-minion"
POSTVERSION=2.3.280 POSTVERSION=2.3.280
} }