mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
remove more from sosetup.log
This commit is contained in:
@@ -1633,12 +1633,17 @@ salt_checkin() {
|
|||||||
done
|
done
|
||||||
|
|
||||||
echo " Confirming existence of the CA certificate"
|
echo " Confirming existence of the CA certificate"
|
||||||
cat /etc/pki/ca.crt
|
openssl x509 -in /etc/pki/ca.crt -noout -subject -issuer -dates
|
||||||
echo " Applyng a mine hack";
|
echo " Applyng a mine hack";
|
||||||
salt "$MINION_ID" mine.send x509.get_pem_entries glob_path=/etc/pki/ca.crt;
|
salt "$MINION_ID" mine.send x509.get_pem_entries glob_path=/etc/pki/ca.crt;
|
||||||
salt "$MINION_ID" mine.update;
|
salt "$MINION_ID" mine.update;
|
||||||
echo " Confirming salt mine now contain the certificate";
|
echo "Confirming salt mine now contains the certificate";
|
||||||
salt "$MINION_ID" mine.get '*' x509.get_pem_entries;
|
salt "$MINION_ID" mine.get '*' x509.get_pem_entries | grep -E 'BEGIN CERTIFICATE|END CERTIFICATE';
|
||||||
|
if [ $? -eq 0 ]; then
|
||||||
|
echo "CA in mine"
|
||||||
|
else
|
||||||
|
echo "CA not in mine"
|
||||||
|
fi
|
||||||
echo " Applying SSL state";
|
echo " Applying SSL state";
|
||||||
salt-call state.apply ssl;
|
salt-call state.apply ssl;
|
||||||
} >> "$setup_log" 2>&1
|
} >> "$setup_log" 2>&1
|
||||||
|
|||||||
Reference in New Issue
Block a user