X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;ds=inline;f=modules%2Fssl%2Fmanifests%2Fservice.pp;h=f0400525dd76313b9145e5911dacd9be03e0e67c;hb=745714ee9bbb6fcbabbf46820358c1c4b7ee005d;hp=7b8921ceae49966ce94f929a0740c7f6b3c22927;hpb=856320396d2488b41a6db2edd34876e14a9e4564;p=dsa-puppet.git diff --git a/modules/ssl/manifests/service.pp b/modules/ssl/manifests/service.pp index 7b8921ce..f0400525 100644 --- a/modules/ssl/manifests/service.pp +++ b/modules/ssl/manifests/service.pp @@ -7,19 +7,19 @@ define ssl::service($ensure = present, $tlsaport = 443, $notify = []) { file { "/etc/ssl/debian/certs/$name.crt": source => "puppet:///modules/ssl/servicecerts/${name}.crt", - notify => [ Exec['c_rehash /etc/ssl/debian/certs'], $notify ], + notify => [ Exec['refresh_debian_hashes'], $notify ], } file { "/etc/ssl/debian/certs/$name.crt-chain": source => [ "puppet:///modules/ssl/chains/${name}.crt", "puppet:///modules/ssl/servicecerts/${name}.crt" ], - notify => [ Exec['c_rehash /etc/ssl/debian/certs'], $notify ], - links => follow, + notify => [ Exec['refresh_debian_hashes'], $notify ], + links => follow, } if $tlsaport > 0 { - dnsextras::tlsa_record{ "tlsa-${tlsaport}": - zone => 'debian.org', + dnsextras::tlsa_record{ "tlsa-${name}-${tlsaport}": + zone => 'debian.org', certfile => "/etc/puppet/modules/ssl/files/servicecerts/${name}.crt", - port => $tlsaport, + port => $tlsaport, hostname => "$name", } }