Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

For SAM to use a custom certificate, first it is required to install the certificate in the Snare central server, once the certificate has been  installed, restart SAM so the new certificate can be detected and then go to SAM UI to "Settings"->"General->"Agent HTTPS Certificate" option and choose the certificate from the selection list.

To install the certificate the procedure is as follows:

Given a CA certificate file foo.crt, follow these steps to install it on Snare Central:

  1. Create a directory for extra CA certificates in /usr/local/share/ca-certificates:

    sudo mkdir /usr/local/share/ca-certificates/SAM
  2. Copy the CA .crt file to this directory:

    sudo cp foo.crt /usr/local/share/ca-certificates/SAM/foo.crt
  3. Let Snare Central add the .crt file's path relative to /usr/local/share/ca-certificates to /etc/ca-certificates.conf:

    sudo update-ca-certificates
  4. Restart SAM:

sudo /etc/init.d/snare restart
  1. Go to SAM UI to “Settings” → “General”

  2. Choose the correct certifciate in “Agent HTTPS Certificate”

NOTE: In case of a .pem file on Snare Central, it must first be converted to a .crt file:

openssl x509 -in foo.pem -inform PEM -out foo.crt

Or a .cer file can be converted to a .crt file:

openssl x509 -inform DER -in foo.cer -out foo.crt

  • No labels