CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-30 16:38:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

SSL Module - Change registry settings

Browse Source
This commit is contained in:
Mike Reeves
2018-07-17 12:34:22 -04:00
parent 4128a2ea4e
commit 4046f5fc00
2 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
salt/ssl/init.sls
+1 -5
View File
@@ -26,8 +26,6 @@ m2cryptopkgs:
- CN: {{ master }}
- days_remaining: 3000
- backup: True
- keyUsage: "digitalSignature, nonRepudiation"
- extendedkeyUsage: "serverAuth, clientAuth"
- managed_private_key:
name: /etc/pki/filebeat.key
bits: 4096
@@ -53,7 +51,7 @@ fbcrtlink:
/etc/pki/registry.crt:
x509.certificate_managed:
- ca_server: {{ master }}
- signing_policy: filebeat
- signing_policy: registry
- public_key: /etc/pki/registry.key
- CN: {{ master }}
- days_remaining: 3000
@@ -72,8 +70,6 @@ fbcrtlink:
- signing_policy: filebeat
- public_key: /opt/so/conf/filebeat/etc/pki/filebeat.key
- CN: {{ master }}
- keyUsage: "digitalSignature, nonRepudiation"
- extendedkeyUsage: "serverAuth, clientAuth"
- days_remaining: 3000
- backup: True
- managed_private_key: