# Rebuild certificates and keys
system("rm -rf /var/ossim/ssl/*");
if ( $profile_server == 1 )
{
system("bash /var/lib/dpkg/info/alienvault-crypto.postinst configure");
https://github.com/jpalanco/alienvault-ossim/blob/master/ossim-cd-tools/auxscripts/prepare_clone_machine.pl
Run "openssl req -nodes -newkey rsa:2048 -keyout YOURSYSTEMNAME.key -out YOURSYSTEMNAME.csr"
Open the csr file you just generated and capture the data within it.
Visit the site https://WINDOWSSERVER/certsrv (You can substitute this lines for whatever CA you use)
Click Request a certificate (You can substitute this lines for whatever CA you use)
Click advanced certificate request (You can substitute this lines for whatever CA you use)
Paste contents from step 2 into the box labeled base-64-encoded... (You can substitute this lines for whatever CA you use)
Click the drop down box under certificate template and select Web Server (You can substitute this lines for whatever CA you use)
Under Attributes, create dns entries for all system names in question . Example: san:dns=YOURSYSTEMNAME&dns=YOURSYSTEMNAME.blah (You can substitute this lines for whatever CA you use)
Click submit button (You can substitute this lines for whatever CA you use)
Click the DER file (csr) by clicking the Download Certificate button. (You can substitute this lines for whatever CA you use)
Copy the cer file to your Alienvault server.
Edit the file /etc/ossim/ossim_setup.conf and change the two lines under [framework] to appear as the following (Make the path changes accordingly):
framework_https_cert=/PATH/TO/YOURSYSTEMNAME.cer
framework_https_key=/PATH/TO/YOURSYSTEMNAME.key
Run "ossim-reconfig" and wait until completion.
Check to see if the certs are working.