feat: use more generic names for certs and add docs

docs/edge_processor.md

@@ -0,0 +1,17 @@
+# SC4S + EP guide
+
+## Basic Setup:
+
+* Use IP of EP instance as HEC URL: `SC4S_DEST_SPLUNK_HEC_DEFAULT_URL=http://x.x.x.x:8088`
+* Use token from EP Global Settings: `SC4S_DEST_SPLUNK_HEC_DEFAULT_TOKEN=secret`
+* Use EP API format: `SC4S_HEC_TEMPLATE=t_edge_hec`
+
+## TLS:
+
+* Switch to HTTPS at HEC: `SC4S_DEST_SPLUNK_HEC_DEFAULT_URL=https://x.x.x.x:8088`
+* [Generate certificates](https://docs.splunk.com/Documentation/SplunkCloud/9.1.2308/EdgeProcessor/SecureForwarders)
+* Upload certs at Edge Processor TLS settings
+* Rename `data_source_client_cert.pem` to `cert.pem`
+* Rename `data_source_client_key.pem` to `key.pem`
+* Mount dir with certs to `/etc/syslog-ng/tls/hec`
+* Set path for TLS dir: `SC4S_DEST_TLS_MOUNT=/etc/syslog-ng/tls/hec`

package/etc/conf.d/destinations/dest_hec/plugin.jinja

@@ -35,8 +35,8 @@ destination d_hec{{ dest_mode }}{{ altname }}{
         tls(
             peer-verify({{ peer_verify }})
         {% if tls_mount %}
-            key-file("{{ tls_mount }}/data_source_client_key.pem")
-            cert-file("{{ tls_mount }}/data_source_client_cert.pem")
+            key-file("{{ tls_mount }}/key.pem")
+            cert-file("{{ tls_mount }}/cert.pem")
             ca-dir("{{ tls_mount }}")
         {% endif %}
         {%- if cipher_suite %}

package/sbin/entrypoint.sh

@@ -172,7 +172,7 @@ then
   if [ "${SC4S_DEST_SPLUNK_HEC_DEFAULT_TLS_VERIFY}" == "no" ]; then export NO_VERIFY=-k ; fi
 
   if [ -n "${SC4S_DEST_TLS_MOUNT}" ]; then
-    export HEC_TLS_OPTS="--cert ${SC4S_DEST_TLS_MOUNT}/data_source_client_cert.pem  --key ${SC4S_DEST_TLS_MOUNT}/data_source_client_key.pem";
+    export HEC_TLS_OPTS="--cert ${SC4S_DEST_TLS_MOUNT}/cert.pem  --key ${SC4S_DEST_TLS_MOUNT}/key.pem --cacert ${SC4S_DEST_TLS_MOUNT}/ca_cert.pem";
   else
     export HEC_TLS_OPTS="";
   fi