#CA Certificate
####Table Of Contents
##Overview
Installs a CA certificate into OpenSSL's trusted store and optionally Java's
###Module Description
Installs distro certificates, installs the requested CA, trusts the certificate then regenerates the trusted SSL directory. The CA to install can be a file resource, raw content, or an existing file on the host.
Java support injects the requested certificate into the requested store.
OpenSSL only
ca_certificate { 'puppet-ca':
source => '/var/lib/puppet/ssl/certs/ca.pem',
}
OpenSSL and Java
ca_certificate { 'puppet-ca':
source => '/var/lib/puppet/ssl/certs/ca.pem',
java => true,
java_keystore => '/etc/ssl/certs/java/cacerts',
java_storepass => 'changeit',
}
##Limitations
- Ubuntu only