Browse Source

icinga2: Work around SCT checking for hostcerts for now.

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 2 years ago
parent
commit
fd76c665b9
1 changed files with 5 additions and 0 deletions
  1. 5 0
      icinga2/commands.d/ssl_cert.conf

+ 5 - 0
icinga2/commands.d/ssl_cert.conf

@@ -13,6 +13,11 @@ object CheckCommand "ssl_host_cert" {
 		"-f" = "$ssl_cert_file$"
 		"-w" = "$ssl_cert_warn$"
 		"-c" = "$ssl_cert_crit$"
+{%- if grains.oscodename == 'bullseye' %}
+		"--ignore-sct" = {
+			set_if = true
+		}
+{%- endif %}
 	}
 
 	vars.ssl_cert_host = "localhost"