Reverse Proxy - The Big Commit

2026-02-19 13:43:32 +01:00 · 2018-10-10 21:24:24 -04:00
parent 2760012741
commit 8a25da1ee9
6 changed files with 107 additions and 38 deletions
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -25,3 +25,16 @@ x509_signing_policies:
    - authorityKeyIdentifier: keyid,issuer:always
    - days_valid: 3000
    - copypath: /etc/pki/issued_certs/
+    master:
+      - minions: '*'
+      - signing_private_key: /etc/pki/ca.key
+      - signing_cert: /etc/pki/ca.crt
+      - C: US
+      - ST: Utah
+      - L: Salt Lake City
+      - basicConstraints: "critical CA:false"
+      - keyUsage: "critical keyEncipherment"
+      - subjectKeyIdentifier: hash
+      - authorityKeyIdentifier: keyid,issuer:always
+      - days_valid: 3000
+      - copypath: /etc/pki/issued_certs/