CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

jruby ssl fun

Browse Source
This commit is contained in:
Mike Reeves
2020-08-07 23:28:58 -04:00
parent 62a6f29c96
commit 5525e235d1
5 changed files with 2019 additions and 176 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/elasticsearch/files/scripts/so-catrust
View File

@@ -22,7 +22,11 @@
if [ ! -f /opt/so/saltstack/local/salt/common/cacerts ]; then
docker run -v /etc/pki/ca.crt:/etc/pki/ca.crt --name so-elasticsearchca --user root --entrypoint keytool {{ MANAGER }}:5000/{{ IMAGEREPO }}/so-logstash:{{ VERSION }} -keystore /etc/pki/ca-trust/extracted/java/cacerts -alias SOSCA -import -file /etc/pki/ca.crt -storepass changeit -noprompt
docker cp so-elasticsearchca:/etc/pki/ca-trust/extracted/java/cacerts /opt/so/saltstack/local/salt/common/cacerts
docker cp so-elasticsearchca:/etc/pki/tls/certs/ca-bundle.crt /opt/so/saltstack/local/salt/common/ca-bundle.crt
docker rm so-elasticsearchca
echo "" >> /opt/so/saltstack/local/salt/common/ca-bundle.crt
echo "sosca" >> /opt/so/saltstack/local/salt/common/ca-bundle.crt
echo /etc/pki/ca.crt >> /opt/so/saltstack/local/salt/common/ca-bundle.crt
else
exit 0
fi