mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
Merge pull request #58 from dlee35/master
generate self-signed cert for osquery clients
This commit is contained in:
@@ -96,12 +96,18 @@ fbcrtlink:
|
|||||||
bits: 4096
|
bits: 4096
|
||||||
backup: True
|
backup: True
|
||||||
|
|
||||||
# Create a cert for OSQuery
|
# Create a private key and cert for OSQuery
|
||||||
|
/etc/pki/fleet.key:
|
||||||
|
x509.private_key_managed:
|
||||||
|
- CN: {{ master }}
|
||||||
|
- bits: 4096
|
||||||
|
- days_remaining: 0
|
||||||
|
- days_valid: 3650
|
||||||
|
- backup: True
|
||||||
|
|
||||||
/etc/pki/fleet.crt:
|
/etc/pki/fleet.crt:
|
||||||
x509.certificate_managed:
|
x509.certificate_managed:
|
||||||
- ca_server: {{ master }}
|
- signing_private_key: /etc/pki/fleet.key
|
||||||
- signing_policy: fleet
|
|
||||||
- public_key: /etc/pki/fleet.key
|
|
||||||
- CN: {{ master }}
|
- CN: {{ master }}
|
||||||
- days_remaining: 0
|
- days_remaining: 0
|
||||||
- days_valid: 3650
|
- days_valid: 3650
|
||||||
|
|||||||
Reference in New Issue
Block a user