Sécurisation de l'inventaire #11
Description
Il faudrait compléter le couple utilisateur/mot de passe du serveur Apache avec la gestion de certificats, afin de sécuriser la remontée des inventaires vers le serveur.
user
_Specifies the user to use for HTTP authentication on the server._
password
_Specifies the password to use for HTTP authentication on the server._
ca-cert-dir
_Specifies the directory containing indexed Certification Authority (CA) certificates.
This directory must contain the certificate files corresponding to different certificate authorities in Privacy Enhanced Mail (PEM) format. The file name of each certificate file must match the hash value of the certificate's subject field and use the .0 extension.
You can obtain the hash value of the certificate's subject field and copy the CA.crt certificate to the expected place following this snippet:
$ CA_CERT_DIR=/etc/glpi-agent/ca-cert-dir
$ openssl x509 -in CA.crt -subject_hash -noout
b760f1ce
* cp -a CA.crt $CA_CERT_DIR/b760f1ce.0_
ca-cert-file
_Specifies the file containing aggregated Certification Authority (CA) certificates._
ssl-cert-file
_Specifies the file containing SSL client certificate to use when connecting to server target or for WinRM remote inventory._
ssl-fingerprint (Available since GLPI Agent v1.3)
_Specifies the fingerprint of the ssl server certificate to trust.
The fingerprint to use can be retrieved in agent log by temporarily enabling no-ssl-check option._