TLS.md

Threatseer over mutual TLS

1. Get certstrap to make your certs:

   go get -u github.com/square/certstrap 

2. Make your CA:

   certstrap init --common-name "threatseer CA"

3. Make make a request for the server:

   certstrap request-cert --domain threatseer

4. Mint and sign the key and cert for server : The last argument, threatseer, is your common name (CN). Expected CN can be overridden on both the agent and server.

   bin/certstrap sign --CA "threatseer CA" threatseer

5. Make make a request for the agent: The last argument, agent, is your common name (CN). Expected CN can be overridden on both the agent and server.

   certstrap request-cert --domain agent

6. Mint and sign the key and cert for agent :

   bin/certstrap sign --CA "threatseer CA" agent

The files will be placed in a directory called out.