Provide Users an Easier Way to Change Certificates

activecm / BeaKer

Beacon Kibana Executable Report. Aggregates Sysmon Network Events With Elasticsearch and Kibana

GNU General Public License v3.0

285 stars 40 forks source link

Provide Users an Easier Way to Change Certificates #10

Open Zalgo2462 opened 4 years ago

Zalgo2462 commented 4 years ago

The installer currently generates self signed certificates to encrypt communications to the Elastic server. We could replace the self signed certificates by having users add volume mounts to replace the installed certificates in the elasticsearch and kibana containers. We should wrap this mechanism and make it more user friendly.

Zalgo2462 commented 3 years ago

Today, we are volume mounting in the certificates, but no one has tried replacing them. We just need to verify and document that users can change out the certificates in /etc/BeaKer/certificates, reload beaker with a beaker down and beaker up -d, and have it all work.