浏览代码

icinga2: Work around SCT checking for hostcerts for now.

Signed-off-by: Maximilian Wilhelm <max@sdn.clinic>
Maximilian Wilhelm 2 年之前
父节点
当前提交
fd76c665b9
共有 1 个文件被更改,包括 5 次插入0 次删除
  1. 5 0
      icinga2/commands.d/ssl_cert.conf

+ 5 - 0
icinga2/commands.d/ssl_cert.conf

@@ -13,6 +13,11 @@ object CheckCommand "ssl_host_cert" {
 		"-f" = "$ssl_cert_file$"
 		"-w" = "$ssl_cert_warn$"
 		"-c" = "$ssl_cert_crit$"
+{%- if grains.oscodename == 'bullseye' %}
+		"--ignore-sct" = {
+			set_if = true
+		}
+{%- endif %}
 	}
 
 	vars.ssl_cert_host = "localhost"