AAC::Configure BigFix [] Service with CA signed certificate
| 0 Votes |
Description
This Fixlet prompts for the certificate and certificate key to be used enabling Bigfix Services with CA signed certificates.
Certificate file will be created with extension .pem, its key with extension _key.pem
Written by Andrea.Capasso@hcl.com using documentation for
Property Details
| 26722 | |
| Alpha - Code that was just developed | |
| AAC::Configure BigFix [] Service with CA signed certificate | |
| BES | |
| Utility | |
| andrea.capasso@hcl.com | |
| 5/27/2020 12:00:00 AM | |
| SSL Certificates | |
| True | |
| kapax on 11/16/2020 2:14:07 AM | |
| kapax on 11/16/2020 2:14:07 AM | |
| 1717 Views / 2 Downloads | |
* Average over 0 ratings.
** Log In or Register to add your rating.
|
Relevance
| Used in 1 fixlet | * Results in a true/false |
exists service "BESWebReportsServer" OR exists main gather service or exist webui service
Actions
Action 1 (default)
Action Link Click
here to deploy this action.
Script Type
BigFix Action Script
action log commands
if {name of operating system starts with "Win"}
parameter "PathSeparator"="\"
else
parameter "PathSeparator"="/"
endif
parameter "FullCertName"="{(parameter "CertificateLocation") & (parameter "PathSeparator") & (parameter "CertName")}"
appendfile {parameter "Certificate"}
folder create "{parameter "CertificateLocation"}"
delete "{parameter "FullCertName" & ".pem"}"
move __appendfile "{parameter "FullCertName" & ".pem"}"
appendfile {parameter "CertificateKey"}
delete "{parameter "FullCertName" & "_key.pem"}"
move __appendfile "{parameter "FullCertName" & "_key.pem"}"
action log all
if {parameter "BigFixComponent" is "WebReports"}
continue if {exists service "BESWebReportsServer"}
setting "_WebReports_HTTPServer_SSLCertificateFilePath"="{parameter "FullCertName" & ".pem"}" on "{now}" for client
setting "_WebReports_HTTPServer_SSLPrivateKeyFilePath"="{parameter "FullCertName" & "_key.pem"}" on "{now}" for client
setting "_WebReports_HTTPServer_UseSSLFlag"="1" on "{now}" for client
setting "_WebReports_HTTPServer_RequireTLS12"="1" on "{now}" for client
if {name of operating system starts with "Win"}
delete __appendfile
appendfile net stop beswebreportsserver
appendfile net start beswebreportsserver
delete restartWR.bat
move __appendfile restartWR.bat
waithidden restartWR.bat
delete restartWR.bat
else
wait /etc/init.d/beswebreportsserver stop
wait /etc/init.d/beswebreportsserver start
endif
// if for some reason the service hasn't started yet, fail here
continue if {exists running service "BESWebReportsServer"}
elseif {parameter "BigFixComponent" is "WebUI"}
continue if {exists webui service}
// setting "_WebUIAppEnv_WEB_CERT_FILE"="{parameter "FullCertName" & ".pem"}" on "{now}" for client
// setting "_WebUIAppEnv_WEB_KEY_FILE"="{parameter "FullCertName" & "_key.pem"}" on "{now}" for client
parameter "TargetDir"="{value of setting "_WebUIAppEnv_WebUI_DIR" of client & "WebUI" }"
if { exist file "ssl.crt" of (folder (parameter "TargetDir" as string))}
parameter "WebUIcertname"="{pathname of file "ssl.crt" of folder (parameter "TargetDir")}"
move "{parameter "WebUIcertname"}" "{parameter "WebUIcertname" & "_" & id of current action}"
else
parameter "WebUIcertname"="{(parameter "TargetDir") & (parameter "PathSeparator") & "ssl.crt"}"
endif
copy "{parameter "FullCertName" & ".pem"}" "{parameter "WebUIcertname"}"
if { exist file "ssl.pvk" of (folder (parameter "TargetDir" as string))}
parameter "WebUIcertKeyname"="{pathname of file "ssl.pvk" of folder (parameter "TargetDir")}"
move "{parameter "WebUIcertKeyname"}" "{parameter "WebUIcertKeyname" & "_" & id of current action}"
else
parameter "WebUIcertKeyname"="{(parameter "TargetDir") & (parameter "PathSeparator") & "ssl.pvk"}"
endif
copy "{parameter "FullCertName" & "_key.pem"}" "{parameter "WebUIcertKeyname"}"
elseif {parameter "BigFixComponent" is "RestAPI" or parameter "BigFixComponent" is "Server"}
continue if {exists main gather service}
setting "_BESRelay_HTTPServer_SSLCertificateFilePath"="{parameter "FullCertName" & ".pem"}" on "{now}" for client
setting "_BESRelay_HTTPServer_SSLPrivateKeyFilePath"="{parameter "FullCertName" & "_key.pem"}" on "{now}" for client
setting "_BESRelay_HTTPServer_UseSSLFlag"="1" on "{now}" for client
setting "_BESRelay_HTTPServer_RequireTLS12"="1" on "{now}" for client
else
appendfile {parameter "BigFixComponent"}
delete "{parameter "FullCertName" & ".txt"}"
move __appendfile "{parameter "FullCertName" & ".txt"}"
endif
// action log all
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Sharing
| Social Media: |
