Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VSS UI enabled without ca chain #1581

Open
toweber opened this issue Aug 14, 2020 · 0 comments
Open

VSS UI enabled without ca chain #1581

toweber opened this issue Aug 14, 2020 · 0 comments

Comments

@toweber
Copy link
Collaborator

toweber commented Aug 14, 2020

Hi,
I just realised that in the nginx.conf.j2 only the elastic cert is used and not the full chain. This leads to an insecure connection issue in the browser.

ssl_certificate "/etc/nginx/ssl/{{ inventory_hostname }}.pem";

server {
        listen 6200 ssl;
        server_name elastic;
        ssl_certificate "/etc/nginx/ssl/{{ inventory_hostname }}.pem";
        ssl_certificate_key "/etc/nginx/ssl/{{ inventory_hostname }}-Key.pem";
        ssl on;
        location / {
            proxy_pass http://localhost:9200/;

The chain is provided by the VSD in the file /etc/nginx/ssl/{{ inventory_hostname }}Cert.pem

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant