From 5866acf63aa00086e4728adec5dfcadf1211ae49 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Tue, 9 Oct 2018 11:11:25 -0400 Subject: [PATCH] PKCS8 Fix Attempt #2 --- salt/ssl/init.sls | 11 +++-------- 1 file changed, 3 insertions(+), 8 deletions(-) diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls index c3029c10c..08532dcd2 100644 --- a/salt/ssl/init.sls +++ b/salt/ssl/init.sls @@ -34,10 +34,8 @@ m2cryptopkgs: # Convert the key to pkcs#8 so logstash will work correctly. filebeatpkcs: cmd.run: - - name: /usr/bin/openssl pkcs8 -in /etc/pki/filebeat.key -topk8 -out /etc/pki/filebeat.p8 - - onchanges: - - file: /etc/pki/filebeat.key - + - name: "/usr/bin/openssl pkcs8 -in /etc/pki/filebeat.key -topk8 -out /etc/pki/filebeat.p8 -passout pass:" + # Create Symlinks to the keys so I can distribute it to all the things filebeatdir: file.directory: @@ -93,9 +91,6 @@ fbcertdir: # Convert the key to pkcs#8 so logstash will work correctly. filebeatpkcs: cmd.run: - - name: /usr/bin/openssl pkcs8 -in /opt/so/conf/filebeat/etc/pki/filebeat.key -topk8 -out /opt/so/conf/filebeat/etc/pki/filebeat.p8 - - onchanges: - - file: /opt/so/conf/filebeat/etc/pki/filebeat.p8 - + - name: "/usr/bin/openssl pkcs8 -in /opt/so/conf/filebeat/etc/pki/filebeat.key -topk8 -out /opt/so/conf/filebeat/etc/pki/filebeat.p8 -passout pass:" {% endif %}