-
Notifications
You must be signed in to change notification settings - Fork 61
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Consolidate SSL setup and all service certs to ~/data/security/ssl #921
Comments
Need to create docs around how to security setup ssl. Currently there is a default CA passphrase: This should be set by each user in a secure environment and all the certs recreated, and documented. |
Oh yeah I remember why ldap_server certs are out there on their own. OpenLDAP (slapd) expects it's config/ssl in /etc/ldap and database in /var/lib, and gets very upset if they're not (on debian/ubuntu this is down to apparmor, in no small part). |
For now, SSL setup is consolidated. |
Currently maverick_web creates certs from CA and adds to ~/data/web/ssl. LDAP should create certs, and visiond as well. We should consolidate all the certs into ~/data/security/ssl.
The text was updated successfully, but these errors were encountered: