Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Create a directory for extra CA certificates in /usr/local/share/ca-certificates:

    Code Block
    sudo mkdir /usr/local/share/ca-certificates/SAM
    
    
  2. Copy the CA .crt file to this directory:

    Code Block
    sudo cp foo.crt /usr/local/share/ca-certificates/SAM/foo.crt
    
    
  3. Let Snare Central add the .crt file's path relative to /usr/local/share/ca-certificates to /etc/ca-certificates.conf:

    Code Block
    sudo update-ca-certificates
    
    4. 
  4. Restart

    SAM:

Code Block
sudo /etc/init.d/snare restart

...

  1. Go to SAM UI to “Settings” → “General”

  2. Choose the correct certifciate in “Agent HTTPS Certificate”

NOTE: In case of a .pem file on Snare Central, it must first be converted to a .crt file:

Code Block
openssl x509 -in foo.pem -inform PEM -out foo.crt

Or a .cer file can be converted to a .crt file:

Code Block
openssl x509 -inform DER -in foo.cer -out foo.crt