CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 09:12:45 +01:00
Code Issues Packages Projects Releases Wiki Activity

Setup - Add peer config to the master config

Browse Source
This commit is contained in:
Mike Reeves
2018-05-24 11:23:05 -04:00
parent 9311031931
commit 652a0d0592
3 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
files/master
View File

@@ -53,3 +53,7 @@ file_roots:
pillar_roots: pillar_roots:
base: base:
- /opt/so/saltstack/pillar - /opt/so/saltstack/pillar
peer:
.*:
- x509.sign_remote_certificate

2
salt/ca/init.sls
View File

@@ -15,7 +15,7 @@ pki_private_key:
- passphrase: - passphrase:
- cipher: aes_256_cbc - cipher: aes_256_cbc
- backup: True - backup: True
/etc/pki/ca.crt: /etc/pki/ca.crt:
x509.certificate_managed: x509.certificate_managed:
- signing_private_key: /etc/pki/ca.key - signing_private_key: /etc/pki/ca.key

4
salt/ssl/init.sls
View File

@@ -4,12 +4,12 @@
/usr/local/share/ca-certificates/intca.crt: /usr/local/share/ca-certificates/intca.crt:
x509.pem_managed: x509.pem_managed:
- text: {{ salt['mine.get']('ca', 'x509.get_pem_entries')['ca']['/etc/pki/ca.crt']|replace('\n', '') }} - text: {{ salt['mine.get']('master', 'x509.get_pem_entries')['ca']['/etc/pki/ca.crt']|replace('\n', '') }}
# Request a cert and drop it where it needs to go to be distributed # Request a cert and drop it where it needs to go to be distributed
/etc/pki/filebeat.crt: /etc/pki/filebeat.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: ca - ca_server: ca.example.com
- signing_policy: filebeat - signing_policy: filebeat
- public_key: /etc/pki/filebeat.key - public_key: /etc/pki/filebeat.key
- CN: security.onion - CN: security.onion