Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

generate new forwarder SSL keys on-the-fly when transferring between Malcolm and Hedgehog #492

Closed
mmguero opened this issue Jun 17, 2024 · 0 comments
Closed

generate new forwarder SSL keys on-the-fly when transferring between Malcolm and Hedgehog #492

mmguero opened this issue Jun 17, 2024 · 0 comments
Assignees
@mmguero
Labels
enhancement New feature or request install.py Relating to the install.py configuration script security Related to issues with bearing on the security of Malcolm itself sensor For issues dealing with the Hedgehog OS capture sensor
Milestone
v24.06.0

Comments

@mmguero
Copy link
Collaborator

mmguero commented Jun 17, 2024

see the documentation here and search for Transfer self-signed client certificates to a remote log forwarder

When we do this on the Malcolm side, (in control.py, under the auth_setup stuff) we should generate the new certificates and send them on-the-fly, then delete them, rather than just re-using the filebeat/certs/ one.
@mmguero mmguero added enhancement New feature or request install.py Relating to the install.py configuration script sensor For issues dealing with the Hedgehog OS capture sensor security Related to issues with bearing on the security of Malcolm itself labels Jun 17, 2024
@mmguero mmguero added this to the v24.07.0 milestone Jun 17, 2024
@mmguero mmguero changed the title generate new forwarder SSL keys on-the-fly when generate new forwarder SSL keys on-the-fly when transferring between Malcolm and Hedgehog Jun 19, 2024
@mmguero mmguero modified the milestones: v24.07.0, v24.06.0 Jun 19, 2024
@mmguero mmguero self-assigned this Jun 19, 2024
mmguero added a commit to mmguero-dev/Malcolm that referenced this issue Jun 19, 2024
@mmguero
for idaholab#492, generate a new client SSL key/crt when doing the tr…
b0443a5 
…ansfer to hedgehog rather than r reusing the internal filebeat one
@mmguero mmguero closed this as completed Jun 19, 2024
This was referenced Jun 26, 2024
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mmguero mmguero

Labels
enhancement New feature or request install.py Relating to the install.py configuration script security Related to issues with bearing on the security of Malcolm itself sensor For issues dealing with the Hedgehog OS capture sensor
Projects
Malcolm
Status: Released
Milestone
v24.06.0
Development

No branches or pull requests
1 participant
@mmguero