summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJacob Hansen <jhansen@op5.com>2021-04-30 10:33:52 (GMT)
committerJacob Hansen <jhansen@op5.com>2021-05-18 12:42:58 (GMT)
commitde9f85c916db4515bd81f2a000d7fb57f8e0f46a (patch)
tree54fce72b54773402876b8a7e9dddf8b3957e757d
parent39c162e594ec962eb338332624d3ac7474227a2b (diff)
downloadmonitoring-plugins-de9f85c.tar.gz
Use openssl generated cert
The SSL certificate generate using make-ssl-cert seems to not work well with a our plugins. Causing a "CN could not be found" error to be shown. Using an OpenSSL generated certifiticate, seems to work better. Signed-off-by: Jacob Hansen <jhansen@op5.com>
-rwxr-xr-x.github/prepare_debian.sh8
1 files changed, 6 insertions, 2 deletions
diff --git a/.github/prepare_debian.sh b/.github/prepare_debian.sh
index 3693acc..a74f346 100755
--- a/.github/prepare_debian.sh
+++ b/.github/prepare_debian.sh
@@ -41,8 +41,12 @@ cat /etc/hosts
41# apache 41# apache
42a2enmod ssl 42a2enmod ssl
43a2ensite default-ssl 43a2ensite default-ssl
44make-ssl-cert generate-default-snakeoil --force-overwrite 44# replace snakeoil certs with openssl generated ones as the make-ssl-cert ones
45service apache2 start 45# seems to cause problems with our plugins
46rm /etc/ssl/certs/ssl-cert-snakeoil.pem
47rm /etc/ssl/private/ssl-cert-snakeoil.key
48openssl req -nodes -newkey rsa:2048 -x509 -sha256 -days 365 -nodes -keyout /etc/ssl/private/ssl-cert-snakeoil.key -out /etc/ssl/certs/ssl-cert-snakeoil.pem -subj "/C=GB/ST=London/L=London/O=Global Security/OU=IT Department/CN=$(hostname)"
49service apache2 restart
46 50
47# squid 51# squid
48cp tools/squid.conf /etc/squid/squid.conf 52cp tools/squid.conf /etc/squid/squid.conf