Mike Reeves
11c8fe3093
Use the host CA trust store for all grid containers
...
Anchor the grid CA and blocklist the eMudhra roots in the host trust
store (new ca.trust state, also used by the desktop role), then mount the
extracted store into each container instead of the frozen copies made by
so-catrust. Containers restart when the host trust changes.
2026-10-27 15:08:21 -04:00
Josh Patterson
38f38e2789
fix allowed states for ca
2025-12-12 18:23:29 -05:00
Josh Patterson
b9ff1704b0
the great ssl refactor
2025-12-11 17:30:06 -05:00
Josh Patterson
36a6a59d55
renew certs 7 days before expire
2025-12-01 11:54:10 -05:00
m0duspwnens
e58c1e189c
use x509 instead of file for onchanges
2023-10-18 15:10:17 -04:00
m0duspwnens
1c1b23c328
fix mine update for ca
2023-10-18 15:07:18 -04:00
m0duspwnens
138aa9c554
update the mine with the ca when it is created or changed
2023-10-18 13:54:14 -04:00
m0duspwnens
869f60ccaa
cipher deprecated for x509_+v2
2023-07-06 10:51:44 -04:00
m0duspwnens
6039a1430e
x509 changes for salt 3006
2023-04-04 08:55:10 -04:00
Mike Reeves
2bd9dd80e2
Move In Day
2022-09-07 09:06:25 -04:00
m0duspwnens
a46a740170
account for salt 3004 adding new chars to random.get_str
2022-01-14 17:23:29 -05:00
m0duspwnens
2405de4b82
fix require
2021-12-28 11:00:35 -05:00
m0duspwnens
f2adcf4ca5
ensure /etc/pki is created and simplify ca logic for non manager in ssl state
2021-12-28 10:41:57 -05:00
m0duspwnens
f93c6146f5
docker binds requires
2021-10-21 15:24:55 -04:00
m0duspwnens
1d8e065902
fix salt retries - https://github.com/Security-Onion-Solutions/securityonion/issues/3948
2021-04-22 08:35:50 -04:00
m0duspwnens
e6ecd609cc
change timeouts to 30s
2021-01-29 13:44:11 -05:00
m0duspwnens
0936dbdb1c
add timeouts and retries to ca/ssl states
2021-01-28 11:40:31 -05:00
m0duspwnens
b693373d8d
change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679
2021-01-20 15:09:53 -05:00
m0duspwnens
09cc8ae1fb
fail the state if it isnt in top
2020-09-09 16:48:50 -04:00
m0duspwnens
a229ae82ce
only allow state to run if it is in top for the node
2020-09-02 16:15:52 -04:00
m0duspwnens
1f3ceb50da
add replace: False to get rid of warning, eventhough it doesntt. bug report submitted on saltstack gh.
2020-08-10 13:04:19 -04:00
m0duspwnens
c00b452f8d
change module.run for ca state
2020-07-28 15:10:16 -04:00
m0duspwnens
7606cc0ad0
changes to ssl state for salt 3001
2020-07-27 15:51:31 -04:00
m0duspwnens
5ca3ecf4bd
fix reference to master grain
2020-07-09 15:42:39 -04:00
m0duspwnens
3cf31e2460
https://github.com/Security-Onion-Solutions/securityonion/issues/404
2020-07-09 11:27:06 -04:00
Mike Reeves
be5f4b04c6
Fix SSL Perms
2020-07-06 17:21:23 -04:00
Jason Ertel
97d127218a
fix: stop updating salt mine - this is an attempt to sort out why the CA intermittently disappears from the mine
2020-06-15 17:40:58 -04:00
m0duspwnens
939ab918b4
update states using module.run - https://github.com/Security-Onion-Solutions/securityonion-saltstack/issues/106
2019-11-07 17:31:06 -05:00
Mike Reeves
188ce9dd89
CA Module - remove new syntax
2018-08-29 11:00:35 -04:00
Mike Reeves
d31592e59c
CA Module - Update module.run syntax
2018-08-29 10:46:15 -04:00
Mike Reeves
5137866826
SSL Module - Allow the CA to sign client certs
2018-07-16 12:44:28 -04:00
Mike Reeves
853b6768c4
SSL Module - Allow the CA to sign client certs
2018-07-16 12:36:16 -04:00
Mike Reeves
8070bd718e
SSL Setup - Changed CN to master host
2018-06-05 16:20:16 -04:00
Mike Reeves
652a0d0592
Setup - Add peer config to the master config
2018-05-24 11:23:05 -04:00
Mike Reeves
9311031931
SSL and CA Modules - Create a private key
2018-05-24 10:45:17 -04:00
Mike Reeves
ee2d5b37b4
SSL and CA Modules - Add base
2018-05-23 16:56:44 -04:00
Mike Reeves
Josh Patterson
Jason Ertel
Mike Reeves