Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -116,7 +116,7 @@ Generate a self-signed certificate which will be used by Santa clients and the s
Add the Santa CN to your hosts file.

```
sudo echo "127.0.0.1 santa" >> /etc/hosts
sudo echo "127.0.0.1 moroz.local" >> /etc/hosts
```

Add the self-signed cert to your system roots.
Expand All @@ -131,6 +131,8 @@ The latest version of Santa is available on the GitHub repo page: https://github
## Configure Santa:
You will need to provide the `SyncBaseURL` settings. See the [Santa repo](https://github.com/google/santa/blob/01df4623c7c534568ca3d310129455ff71cc3eef/Docs/deployment/configuration.md#important) for a complete guide on all the client configuration options.

A likely value for local testing as in the Quickstart will be: `https://moroz.local:8080/v1/santa/`

## Start moroz:
Assumes you have the `./server.crt` and `./server.key` files.

Expand Down
2 changes: 1 addition & 1 deletion cmd/moroz/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ by using the commands below:

Add the santa hostname to your hosts file.

sudo echo "127.0.0.1 santa" >> /etc/hosts
sudo echo "127.0.0.1 moroz.local" >> /etc/hosts

And then, add the cert to roots.

Expand Down
6 changes: 4 additions & 2 deletions tools/dev/certificate/create
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@

openssl genrsa -out server.key 2048
openssl rsa -in server.key -out server.key
openssl req -sha256 -new -key server.key -out server.csr -subj "/CN=santa"
openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt
openssl req -sha256 -new -key server.key -out server.csr \
-subj "/CN=moroz.local" \
-addext "subjectAltName = DNS:moroz.local"
openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt -copy_extensions=copyall
rm -f server.csr