mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
SSL Module - We have certs
This commit is contained in:
@@ -1,18 +1,19 @@
|
||||
{% set master = salt['grains.get']('master') %}
|
||||
# Trust the CA
|
||||
/usr/local/share/ca-certificates:
|
||||
file.directory: []
|
||||
|
||||
/usr/local/share/ca-certificates/intca.crt:
|
||||
x509.pem_managed:
|
||||
- text: {{ salt['mine.get']('master', 'x509.get_pem_entries')['master']['/etc/pki/ca.crt']|replace('\n', '') }}
|
||||
- text: {{ salt['mine.get'](master, 'x509.get_pem_entries')[master]['/etc/pki/ca.crt']|replace('\n', '') }}
|
||||
|
||||
# Request a cert and drop it where it needs to go to be distributed
|
||||
/etc/pki/filebeat.crt:
|
||||
x509.certificate_managed:
|
||||
- ca_server: ca.example.com
|
||||
- ca_server: testnode1
|
||||
- signing_policy: filebeat
|
||||
- public_key: /etc/pki/filebeat.key
|
||||
- CN: security.onion
|
||||
- CN: ca.example.com
|
||||
- days_remaining: 3000
|
||||
- backup: True
|
||||
- managed_private_key:
|
||||
|
||||
Reference in New Issue
Block a user