Is there a way to regenerate the SSL cert for the manager or use your own?

[ihuxn4hi]

Hi there,

Is there a way to regenerate the SSL cert or use your own (like Let's Encrypt)?

Thanks!

[cm-ops]

To regenerate the SSL certificate for SOC you can run salt-call state.apply ssl. If you want to use your own certificate, create your .crt/.key and replace managerssl.crt and managerssl.key in /etc/pki with yours, keep the name managerssl.crt and managerssl.key, restart nginx with so-nginx-restart, and verify in browser you are using your cert.

[ihuxn4hi]

That worked perfectly -- thank you very much!

[adamphetamine]

if you want to use letsencrypt here's a method that works, but could probably be improved
(ie. please let me know if you can improve it)

https://github.com/adamphetamine/letsencrypt-security-onion