Commit Graph

197 Commits

Author SHA1 Message Date
Jason Ertel f4be5641da cert work 2023-08-23 20:49:37 -04:00
Jason Ertel 4484e2d031 cert work 2023-08-23 18:16:49 -04:00
Jason Ertel b8dc9ea560 cert work 2023-08-23 17:50:08 -04:00
Jason Ertel 8a751e097d cert path refactor 2023-08-23 14:32:05 -04:00
Josh Brower 6784bdcb54 Fix certs for Rec & Heavy 2023-08-20 15:46:07 -04:00
Josh Brower e844cf11db Move base_url to cert SAN 2023-08-09 16:38:27 -04:00
Josh Brower 1bc7bbc76e Refactor custom_fqdn 2023-08-02 20:02:37 -04:00
Josh Brower ab28cee7cf Allow multiple Custom Fleet FQDN 2023-08-02 17:45:37 -04:00
Josh Brower 8c16feb772 Rename Fleet pipelines 2023-07-09 12:22:55 -04:00
Josh Brower ce1f363424 Allow base_url 2023-07-08 13:30:19 -04:00
Josh Brower e8860a7d2c Fix perms 2023-07-08 09:04:55 -04:00
Josh Brower beb26596fd Merge remote-tracking branch 'origin/2.4/dev' into 2.4/fleetautogen 2023-07-07 19:12:47 -04:00
Josh Brower ff3bb11fbb Elastic Fleet Certs Refactor 2023-07-07 16:44:16 -04:00
m0duspwnens 12c82d2812 bits deprecation to keysize 2023-07-06 10:49:32 -04:00
m0duspwnens b49a296276 we can remove the unless in ssl state since x509_v2 is patched 2023-07-06 09:44:58 -04:00
m0duspwnens cd1db36c13 add back unless in ssl state 2023-06-29 15:26:16 -04:00
m0duspwnens 34db6fb823 dont need the unless for ssl since using x509v2 now 2023-06-28 15:06:13 -04:00
m0duspwnens be028aa23e define ca_server for nginx.ssl 2023-06-28 10:58:13 -04:00
m0duspwnens 12cce111db custom crt and key for nginx 2023-06-28 10:28:50 -04:00
Mike Reeves cb8faf7c5f Fix the rest of the analyst entries 2023-06-26 16:14:04 -04:00
m0duspwnens 469390696e 2.4 receiver changes 2023-06-15 11:04:16 -04:00
m0duspwnens c49b134122 move so-catrust 2023-05-15 16:43:47 -04:00
m0duspwnens 6320528263 move so-catrust 2023-05-15 14:08:30 -04:00
m0duspwnens 6909d3ed14 move cacertz and capemz to ssl state 2023-05-09 12:16:18 -04:00
Josh Brower 1ab72e9288 Fix cert gen 2023-04-19 10:23:13 -04:00
Josh Brower 36c96c4beb Remove dep vars 2023-04-19 10:02:24 -04:00
Josh Brower d79ad53daf Merge pull request #10153 from Security-Onion-Solutions/fleet-sa
FEATURE: Dedicated Fleet Node
2023-04-19 09:12:30 -04:00
Josh Brower 8cccaef664 mkdirs as needed 2023-04-17 12:28:07 -04:00
Josh Brower 1944d09978 Logstash certs fixup 2023-04-17 11:34:57 -04:00
Josh Brower a7d282b412 Firewall fixup 2023-04-15 18:33:44 -04:00
m0duspwnens d83266c546 remove unrecognized keyword arguments 2023-04-04 09:58:44 -04:00
m0duspwnens 6039a1430e x509 changes for salt 3006 2023-04-04 08:55:10 -04:00
Josh Brower af392681e3 Merge remote-tracking branch 'remotes/origin/2.4/dev' into fleet-sa 2023-04-03 07:27:04 -04:00
Mike Reeves 4944365341 Change the salt dir for elastic fleet 2023-03-17 11:02:02 -04:00
Mike Reeves 12398bdf24 add m2crypto 2023-02-17 13:34:21 -05:00
Mike Reeves c6919a09da replace centos 2023-02-17 11:26:11 -05:00
Josh Brower 29aa6dceed Add logstash 2023-01-27 07:49:21 -05:00
Josh Brower 334a0d7b1c Start using so-elastic-agent container 2022-09-14 10:33:27 -04:00
Josh Brower 6945596eee Tweak elastic agent ssl gen 2022-09-14 08:10:42 -04:00
Josh Brower bf14612258 Change out Elastic Fleet certs 2022-09-13 15:58:53 -04:00
Mike Reeves 2bd9dd80e2 Move In Day 2022-09-07 09:06:25 -04:00
Josh Brower 7a9cb6d110 Initial support - IDH Node 2022-02-07 16:49:11 -05:00
Josh Patterson a02fb37493 Update init.sls 2022-02-02 09:18:02 -05:00
m0duspwnens e63f35a223 change to test 2022-01-27 15:19:33 -05:00
m0duspwnens 487ac24306 revert back to getting ca from mine 2021-12-28 11:16:01 -05:00
m0duspwnens f2adcf4ca5 ensure /etc/pki is created and simplify ca logic for non manager in ssl state 2021-12-28 10:41:57 -05:00
m0duspwnens a46a876ec6 add managersearch to list 2021-12-16 13:48:41 -05:00
m0duspwnens 841b91e052 exclude elasticsearch and managerssl keys and certs from receiver 2021-12-14 16:05:47 -05:00
m0duspwnens d94496bb90 remove minio_key and add missing endif 2021-12-09 13:24:20 -05:00
m0duspwnens c2a952796c Merge remote-tracking branch 'remotes/origin/sans' into issue/6469 2021-12-09 13:13:18 -05:00