search

StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
GNU General Public License v3.0
621 stars 148 forks source link

CA cert path #158

Open problematiq opened 5 years ago

problematiq commented 5 years ago

Is there a way to specify a CA in the config file for Scirius to use when connecting to kibana and ES?

pevma commented 5 years ago

The certificates are located here - /etc/nginx/ssl/ and they are specified in the config here - /etc/nginx/sites-available/

problematiq commented 5 years ago

Sorry putting out fires this week, does this only apply to a full SELKS install? when installing Scirius by itself, nginix isn't included as far as I see.

pevma commented 5 years ago

Yes this applies for SELKS too.

problematiq commented 5 years ago

I've installed Scirius by itself following the documentation outlined here:

https://scirius.readthedocs.io/en/latest/installation-ce.html#installing-scirius-ce

With that install method, Nginx is not installed, are you saying i need to setup a 2 way proxy for this to work with an internal PKI?

pevma commented 5 years ago

You can utilize nginx in general and set it up like so - https://github.com/StamusNetworks/SELKS/blob/SELKS5/scripts/SELKS4-SELKS5/SN-S4-S5-Upgrade.sh#L82

Then you can point to whichever certificate you would like.