ucbpi / puppet-ssl Goto Github PK
View Code? Open in Web Editor NEWPuppet SSL Management Module
License: MIT License
Puppet SSL Management Module
License: MIT License
Hi,
currently wildcart certificates are not allowed. But his is an often used feature.
Is it possible to integrate this feature.
Greetings Jan
The following should be addressed:
I get an error when trying to use this module. I have stdlibs 3.2.0. Are there any other modules this module depends on?
nuff said.
Page text is returned, and not the cert
The intention of the code:
$grab_x509 = "mv -f ${ssl::params::crt_dir}/meta/${cn}.crt.tmp
${ssl::params::crt_dir}/${cn}.crt;
touch ${ssl::params::crt_dir}/meta/${cn}.lock"
$check_x509 =
[
"curl -q --silent ${url_x509} -o ${ssl::params::crt_dir}/meta/${cn}.crt.tmp",
"cat ${ssl::params::crt_dir}/meta/${cn}.crt.tmp|head -n1|grep 'BEGIN CERTIFICATE'"
]
# check if the cert is ready
exec { "get-cert-${cn}":
creates => "${ssl::params::crt_dir}/meta/${cn}.lock",
command => $grab_x509,
onlyif => $check_x509,
path => [ '/bin', '/usr/bin' ],
}
Is to only check InCommon when the lock file doesn't exist (via the creates parameter). Then, if it exists, it should only run if the downloaded certificate is valid (via the onlyif parameter).
The problem is, you can't use both creates and onlyif at the same time to control whether an exec runs.
Initially, before a signed cert is installed, a self-signed cert should be installed to allow for things depending on it's existence to still run (ie. Apache, Stunnel, etc). Since we submit the CSR generated by this class, under normal circumstances, we will never have a cert ready for the apache/stunnel/etc to read and load. This causes the puppet runs to fail if the service depends on it, and it is managed in puppet.
An option for also generating a loadable intermediate cert should be available as well, even if it's just copying the self-signed cert to the intermediate.crt.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.