diff options
author | Jacob Hansen <jhansen@op5.com> | 2021-04-30 12:33:52 +0200 |
---|---|---|
committer | Jacob Hansen <jhansen@op5.com> | 2021-05-18 14:42:58 +0200 |
commit | de9f85c916db4515bd81f2a000d7fb57f8e0f46a (patch) | |
tree | 54fce72b54773402876b8a7e9dddf8b3957e757d | |
parent | 39c162e594ec962eb338332624d3ac7474227a2b (diff) | |
download | monitoring-plugins-de9f85c.tar.gz |
Use openssl generated cert
The SSL certificate generate using make-ssl-cert seems to not work well
with a our plugins. Causing a "CN could not be found" error to be shown.
Using an OpenSSL generated certifiticate, seems to work better.
Signed-off-by: Jacob Hansen <jhansen@op5.com>
-rwxr-xr-x | .github/prepare_debian.sh | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/.github/prepare_debian.sh b/.github/prepare_debian.sh index 3693accf..a74f3464 100755 --- a/.github/prepare_debian.sh +++ b/.github/prepare_debian.sh | |||
@@ -41,8 +41,12 @@ cat /etc/hosts | |||
41 | # apache | 41 | # apache |
42 | a2enmod ssl | 42 | a2enmod ssl |
43 | a2ensite default-ssl | 43 | a2ensite default-ssl |
44 | make-ssl-cert generate-default-snakeoil --force-overwrite | 44 | # replace snakeoil certs with openssl generated ones as the make-ssl-cert ones |
45 | service apache2 start | 45 | # seems to cause problems with our plugins |
46 | rm /etc/ssl/certs/ssl-cert-snakeoil.pem | ||
47 | rm /etc/ssl/private/ssl-cert-snakeoil.key | ||
48 | openssl req -nodes -newkey rsa:2048 -x509 -sha256 -days 365 -nodes -keyout /etc/ssl/private/ssl-cert-snakeoil.key -out /etc/ssl/certs/ssl-cert-snakeoil.pem -subj "/C=GB/ST=London/L=London/O=Global Security/OU=IT Department/CN=$(hostname)" | ||
49 | service apache2 restart | ||
46 | 50 | ||
47 | # squid | 51 | # squid |
48 | cp tools/squid.conf /etc/squid/squid.conf | 52 | cp tools/squid.conf /etc/squid/squid.conf |