-
![thumbnail]()
-
![thumbnail]()
-
Troy Hunt: Your login form posts to HTTPS, but you blew it when you loaded it over HTTP
2015年10月21日 GMT+2 上午11:48:03 - permalink -Ce n'est pas secure de load en http en le formulaire et de le submit en https.
-
http://www.troyhunt.com/2013/05/your-login-form-posts-to-https-but-you.html
-
puppetdb query : get last report for all nodes
2015年10月19日 GMT+2 下午5:27:38 - permalink -curl -s -G http://localhost:8080/pdb/query/v4/reports --data-urlencode 'query=["=","latest_report?","true"]'| jq '.[] | {certname: .certname, receive_time: .receive_time}'
-
https://links.infomee.fr/?N4WFzQ
-
puppetdb query : get non reporting nodes
2015年10月19日 GMT+2 下午5:24:39 - permalink -retrieve last_report older than 30 minutes :
curl -s -G http://localhost:8080/pdb/query/v4/reports --data-urlencode "query=[\"and\",[\"<\",\"receive_time\",\"$(date --utc +%Y-%m-%dT%H:%M -d '30 min ago')\"],[\"=\",\"latest_report?\",\"true\"]]"|jq '.[]| {certname: .certname, receive_time: .receive_time}'
-
https://links.infomee.fr/?CW0tyw
-
puppetdb ssl setup (jetty)
2015年10月19日 GMT+2 上午11:36:54 - permalink -Il faut récupérer le ca.pem du puppetmaster, et les certificats du puppetdb en question
sudo scp $(puppet master --configprint ssldir)/ca/ca_crt.pem puppetdb.example.com:/etc/puppetdb/ssl/ca.pem
$ sudo scp $(puppet master --configprint ssldir)/private_keys/puppetdb.example.com.pem puppetdb.example.com:/etc/puppetdb/ssl/private.pem
$ sudo scp $(puppet master --configprint ssldir)/certs/puppetdb.example.com.pem puppetdb.example.com:/etc/puppetdb/ssl/public.pem- modifier conf pour prendre tout ça en compte :
/etc/puppetdb/conf.d/jetty.ini
The host or IP address to listen on for HTTPS connections
ssl-host = 0.0.0.0
The port to listen on for HTTPS connections
ssl-port = 8081
Private key path
ssl-key = /etc/puppetdb/ssl/private.pem
Public certificate path
ssl-cert = /etc/puppetdb/ssl/public.pem
Certificate authority path
ssl-ca-cert = /etc/puppetdb/ssl/ca.pem
-
https://docs.puppetlabs.com/puppetdb/3.1/install_from_source.html#step-3-option-b-manually-generating-and-preparing-certificates
-
puppetdb call api en HTTPS
2015年10月19日 GMT+2 上午11:35:51 - permalink -With SSL:
curl -X GET https://puppetdb.example.com:8081/pdb/query/v4/resources \
--tlsv1 \
--cacert /etc/puppet/ssl/certs/ca.pem \
--cert /etc/puppet/ssl/certs/thisnode.pem \
--key /etc/puppet/ssl/private_keys/thisnode.pem \
--data-urlencode query@<filename>This requires that you specify a certificate (issued by the same CA PuppetDB trusts), a private key, and a CA certificate.
In both examples, <filename> should be a file that contains the query to execute.
-
https://docs.puppetlabs.com/puppetdb/3.1/api/query/tutorial.html
-
![thumbnail]()
-
![thumbnail]()
