https://github.com/osquery/osquery logo
Powered by
#fleet
Title
# fleet
r

Raghavendra Hiremath

11/02/2022, 4:49 AM
Hi Team, can anyone help me out in setting up TLS? I am trying out fleet on AWS Instance
Copy code
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
  -keyout /tmp/server.key -out /tmp/server.cert -subj "/CN=SERVER_NAME" \
  -addext "subjectAltName=DNS:SERVER_NAME"
k

Kathy Satterlee

11/02/2022, 5:07 PM
Hey @Raghavendra Hiremath, Where are you running in to trouble?
r

Raghavendra Hiremath

11/03/2022, 7:33 AM
Hi @Kathy Satterlee , hope you are doing well! In the CN the server name would be hostname of the machine right? And in the Subject Alternate Name: it will be DNS name with FQDN and hostname ?
Copy code
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
  -keyout /tmp/server.key -out /tmp/server.cert -subj "/CN=hostname" \
  -addext "subjectAltName=FQDN:hostname"
k

Kathy Satterlee

11/03/2022, 3:50 PM
The CN would be the FQDN. If you have any additional domains that would be covered by the same certificate, those can be included as 
subjectAltName
r

Raghavendra Hiremath

12/13/2022, 7:11 AM
Thank you @Kathy Satterlee , it is working!
2 Views
Powered by