You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: controls/postgres_spec.rb
+2-2Lines changed: 2 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
# encoding: utf-8
2
-
#
2
+
3
3
# Copyright 2016, Patrick Muench
4
4
#
5
5
# Licensed under the Apache License, Version 2.0 (the "License");
@@ -241,7 +241,7 @@
241
241
control'postgres-11'do
242
242
impact1.0
243
243
title'SSL is deactivated just for testing the chef-hardening-cookbook. It is recommended to activate ssl communication.'
244
-
desc'The chef-hardening-cookbook will delete the links from #var/lib/postgresql/#{node[\'postgresql\'][\'version\']}/main/server.crt to etc/ssl/certs/ssl-cert-snakeoil.pem and #var/lib/postgresql/#{node[\'postgresql\'][\'version\']}/main/server.key to etc/ssl/private/ssl-cert-snakeoil.key on Debian systems. This certificates are self-signed (see http://en.wikipedia.org/wiki/Snake_oil_%28cryptography%29) and therefore not trusted. You have to #provide our own trusted certificates for SSL.'
244
+
desc'The hardening-cookbook will delete the links from #var/lib/postgresql/%postgresql-version%/main/server.crt to etc/ssl/certs/ssl-cert-snakeoil.pem and #var/lib/postgresql/%postgresql-version%/main/server.key to etc/ssl/private/ssl-cert-snakeoil.key on Debian systems. This certificates are self-signed (see http://en.wikipedia.org/wiki/Snake_oil_%28cryptography%29) and therefore not trusted. You have to #provide our own trusted certificates for SSL.'
0 commit comments