From 2c17c14c3b8235c906e3435369b278e95f09b1ad Mon Sep 17 00:00:00 2001
From: Michael Boelen <michael.boelen@cisofy.com>
Date: Mon, 8 Jul 2019 15:08:56 +0200
Subject: New profile option to ignore specified certificate directories

---
 default.prf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'default.prf')

diff --git a/default.prf b/default.prf
index 98f3e20d..befd40d0 100644
--- a/default.prf
+++ b/default.prf
@@ -92,8 +92,9 @@ skip-plugins=no
 # Skip Lynis upgrade availability test (default: no)
 #skip-upgrade-test=yes
 
-# Locations where to search for SSL certificates
+# Locations where to search for SSL certificates (separate paths with a colon)
 ssl-certificate-paths=/etc/apache2:/etc/dovecot:/etc/httpd:/etc/letsencrypt:/etc/pki:/etc/postfix:/etc/ssl:/opt/psa/var/certificates:/usr/local/psa/var/certificates:/usr/local/share/ca-certificates:/var/www:/srv/www
+ssl-certificate-paths-to-ignore=/etc/letsencrypt/archive:
 
 # Scan type - how deep the audit should be (light, normal or full)
 test-scan-mode=full
-- 
cgit v1.2.3