CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-10 19:22:54 +01:00
Code Issues Packages Projects Releases Wiki Activity

SSL Module - Fix some paths

Browse Source
This commit is contained in:
Mike Reeves
2018-06-06 11:50:16 -04:00
parent cbe6ee394e
commit 7c1d3fe6d7
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
salt/ssl/init.sls
View File

@@ -1,10 +1,11 @@
{% set master = salt['grains.get']('master') %} {% set master = salt['grains.get']('master') %}
# Trust the CA # Trust the CA
/usr/local/share/ca-certificates: #/usr/local/share/ca-certificates:
file.directory: [] # file.directory: []
/usr/local/share/ca-certificates/intca.crt: trusttheca:
x509.pem_managed: x509.pem_managed:
- name: /etc/ssl/certs/intca.crt
- text: {{ salt['mine.get'](master, 'x509.get_pem_entries')[master]['/etc/pki/ca.crt']|replace('\n', '') }} - text: {{ salt['mine.get'](master, 'x509.get_pem_entries')[master]['/etc/pki/ca.crt']|replace('\n', '') }}
{% if grains['role'] == 'so-master' %} {% if grains['role'] == 'so-master' %}
@@ -23,7 +24,11 @@
backup: True backup: True
# Create Symlinks to the keys so I can distribute it to all the things # Create Symlinks to the keys so I can distribute it to all the things
filebeatdir:
file.directory:
- name: /opt/so/saltstack/salt/filebeat/files
- mkdirs: True
fbkeylink: fbkeylink:
file.symlink: file.symlink:
- name: /opt/so/saltstack/salt/filebeat/files/filebeat.key - name: /opt/so/saltstack/salt/filebeat/files/filebeat.key