Certificate Authority Module

Icinga web 2 module to manage local Certificate Authority

CA Module for Icinga Web 2

Icinga Logo

  1. About
  2. Requirements
  3. License
  4. Getting Started
  5. Contributing

About

The Certificate Authority Module for Icinga Web 2 allows the user to manage the local Icinga Certification Authority.

Requirements

  • Icinga Web 2 version 2.5.1+
  • PHP version 5.6.x or 7.x

License

The CA Module for Icinga Web 2 is licensed under the terms of the GNU General Public License Version 2, you will find a copy of this license in the COPYING file included in the source package.

Getting Started

Nothing special. As with every Icinga Web 2 module, drop this to one of your modules folders and make sure that the folder name is ca. Because the web server doesn't run as icinga user, we need to allow for the sudo operations:

Installation

  1. Download the latest version as tarball
  2. Extract the tarball in the Icinga Web 2 modules directory
  3. Make sure the CA module folder is named ca

For Developers only

Clone the repository via Git to your Icinga Web 2 modules directory.

Configuration

# vi /etc/sudoers.d/apache

Cmnd_Alias      CA_CMDS = /usr/sbin/icinga2 ca list, /usr/sbin/icinga2 ca sign *, /usr/sbin/icinga2 ca list --all
Cmnd_Alias      APACHE_COMMANDS = CA_CMDS
User_Alias      APACHEUSERS = apache

Defaults:APACHEUSERS        !requiretty
APACHEUSERS   ALL = (icinga) NOPASSWD: APACHE_COMMANDS
# vi /etc/icingaweb2/modules/ca/config.ini

[config]
icinga2 = "/usr/sbin/icinga2"
sudo = "/usr/bin/sudo"
runas = "icinga"

Screenshots

Sign Screenshot CA - Sign Menu

Module Information Screenshot CA - Module Info

Module Config Screenshot CA - Module Config

Contributing

There are many ways to contribute to Icinga -- whether it be sending patches, testing, reporting bugs, or reviewing and updating the documentation. Every contribution is appreciated!