CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-08 18:22:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

SSL Module - We have certs

Browse Source
This commit is contained in:
Mike Reeves
2018-05-30 11:24:29 -04:00
parent 05b63a1495
commit 9aaec466e2
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
salt/ssl/init.sls
View File

@@ -1,18 +1,19 @@
{% set master = salt['grains.get']('master') %}
# Trust the CA # Trust the CA
/usr/local/share/ca-certificates: /usr/local/share/ca-certificates:
file.directory: [] file.directory: []
/usr/local/share/ca-certificates/intca.crt: /usr/local/share/ca-certificates/intca.crt:
x509.pem_managed: x509.pem_managed:
- text: {{ salt['mine.get']('master', 'x509.get_pem_entries')['master']['/etc/pki/ca.crt']|replace('\n', '') }} - text: {{ salt['mine.get'](master, 'x509.get_pem_entries')[master]['/etc/pki/ca.crt']|replace('\n', '') }}
# Request a cert and drop it where it needs to go to be distributed # Request a cert and drop it where it needs to go to be distributed
/etc/pki/filebeat.crt: /etc/pki/filebeat.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: ca.example.com - ca_server: testnode1
- signing_policy: filebeat - signing_policy: filebeat
- public_key: /etc/pki/filebeat.key - public_key: /etc/pki/filebeat.key
- CN: security.onion - CN: ca.example.com
- days_remaining: 3000 - days_remaining: 3000
- backup: True - backup: True
- managed_private_key: - managed_private_key: