SSL/TLS Setup

Since ScanSuite and DefectDojo are separate installations, each requires its own set of domain names and SSL certificates. This guide covers setting up certificates for both.

1. Register domain names

Register the required domain names in your DNS configuration. For example:

• scansuite.yourdomain.com
• dojo.yourdomain.com

2. Stop the servers

Before applying the certificates, stop both the ScanSuite and DefectDojo servers:

cd ~/apps/scansuite && docker compose down -t 0
cd ~/apps/scansuite/defectdojo && docker compose down -t 0

3. Obtain SSL certificates

Obtain certificates from your local Certificate Authority. If your ScanSuite server is publicly accessible, you can use Let's Encrypt instead.

Install Certbot

sudo snap install certbot --classic

Generate the certificates

sudo certbot certonly --register-unsafely-without-email --agree-tos -d scansuite.yourdomain.com
sudo certbot certonly --register-unsafely-without-email --agree-tos -d dojo.yourdomain.com

4. Replace the keys and certificates

For ScanSuite

Copy the newly generated certificate and key to ~/apps/scansuite/services/nginx/certs/. Ensure the file names cert.pem and key.pem are preserved.

For DefectDojo

Copy the certificate and key to ~/apps/scansuite/defectdojo/certs. Ensure the file names nginx.crt and nginx.key are preserved.

Ensure both files are user readable, otherwise run:

cd ~/apps/scansuite/defectdojo/certs && chmod +r nginx.crt nginx.key

5. Start the servers

cd ~/apps/scansuite/defectdojo && docker compose up -d
cd ~/apps/scansuite && ./start-scansuite

6. Verify certificate loading

Check the nginx logs to confirm that the certificates loaded correctly:

cd ~/apps/scansuite/defectdojo && docker compose logs nginx
cd ~/apps/scansuite && docker compose logs nginx