mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
SSL Setup - Changed CN to master host
This commit is contained in:
@@ -1,3 +1,4 @@
|
|||||||
|
{% set master = salt['grains.get']('master') %}
|
||||||
/etc/salt/minion.d/signing_policies.conf:
|
/etc/salt/minion.d/signing_policies.conf:
|
||||||
file.managed:
|
file.managed:
|
||||||
- source: salt://ca/files/signing_policies.conf
|
- source: salt://ca/files/signing_policies.conf
|
||||||
@@ -19,7 +20,7 @@ pki_private_key:
|
|||||||
/etc/pki/ca.crt:
|
/etc/pki/ca.crt:
|
||||||
x509.certificate_managed:
|
x509.certificate_managed:
|
||||||
- signing_private_key: /etc/pki/ca.key
|
- signing_private_key: /etc/pki/ca.key
|
||||||
- CN: ca.example.com
|
- CN: {{ master }}
|
||||||
- C: US
|
- C: US
|
||||||
- ST: Utah
|
- ST: Utah
|
||||||
- L: Salt Lake City
|
- L: Salt Lake City
|
||||||
|
|||||||
@@ -14,7 +14,7 @@
|
|||||||
- ca_server: {{ master }}
|
- ca_server: {{ master }}
|
||||||
- signing_policy: filebeat
|
- signing_policy: filebeat
|
||||||
- public_key: /etc/pki/filebeat.key
|
- public_key: /etc/pki/filebeat.key
|
||||||
- CN: ca.example.com
|
- CN: {{ master }}
|
||||||
- days_remaining: 3000
|
- days_remaining: 3000
|
||||||
- backup: True
|
- backup: True
|
||||||
- managed_private_key:
|
- managed_private_key:
|
||||||
@@ -40,7 +40,7 @@ fbcrtlink:
|
|||||||
- ca_server: {{ master }}
|
- ca_server: {{ master }}
|
||||||
- signing_policy: filebeat
|
- signing_policy: filebeat
|
||||||
- public_key: /etc/pki/registry.key
|
- public_key: /etc/pki/registry.key
|
||||||
- CN: ca.example.com
|
- CN: {{ master }}
|
||||||
- days_remaining: 3000
|
- days_remaining: 3000
|
||||||
- backup: True
|
- backup: True
|
||||||
- managed_private_key:
|
- managed_private_key:
|
||||||
|
|||||||
Reference in New Issue
Block a user