Skip to content

yankcrime/puppet-ca_certificate

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

#CA Certificate

Build Status

####Table Of Contents

  1. Overview
  2. Module Description
  3. Usage
  4. Limitations

##Overview

Installs a CA certificate into OpenSSL's trusted store and optionally Java's

###Module Description

Installs distro certificates, installs the requested CA, trusts the certificate then regenerates the trusted SSL directory. The CA to install can be a file resource, raw content, or an existing file on the host.

Java support injects the requested certificate into the requested store.

Usage

OpenSSL only

ca_certificate { 'puppet-ca':
  source => '/var/lib/puppet/ssl/certs/ca.pem',
}

OpenSSL and Java

ca_certificate { 'puppet-ca':
  source         => '/var/lib/puppet/ssl/certs/ca.pem',
  java           => true,
  java_keystore  => '/etc/ssl/certs/java/cacerts',
  java_storepass => 'changeit',
}

##Limitations

  1. Ubuntu only