modules/ssl/manifests/init.pp

   1 class ssl {
   2
   3         package { 'openssl':
   4                 ensure => installed
   5         }
   6
   7         file { '/etc/ssl/debian':
   8                 ensure  => directory,
   9                 mode    => '0755',
  10                 purge   => true,
  11                 recurse => true,
  12                 force   => true,
  13                 source  => 'puppet:///files/empty/'
  14         }
  15         file { '/etc/ssl/debian/certs':
  16                 ensure => directory,
  17                 mode   => '0755',
  18         }
  19         file { '/etc/ssl/debian/crls':
  20                 ensure => directory,
  21                 mode   => '0755',
  22         }
  23         file { '/etc/ssl/debian/keys':
  24                 ensure => directory,
  25                 mode   => '0750',
  26         }
  27         file { '/etc/ssl/debian/certs/thishost.crt':
  28                 source => "puppet:///modules/ssl/clientcerts/${::fqdn}.client.crt",
  29                 notify => Exec['c_rehash /etc/ssl/debian/certs'],
  30         }
  31         file { '/etc/ssl/debian/keys/thishost.key':
  32                 source => "puppet:///modules/ssl/clientcerts/${::fqdn}.key",
  33                 mode   => '0640'
  34         }
  35         file { '/etc/ssl/debian/certs/ca.crt':
  36                 source => 'puppet:///modules/ssl/clientcerts/ca.crt',
  37                 notify => Exec['c_rehash /etc/ssl/debian/certs'],
  38         }
  39         file { '/etc/ssl/debian/crls/ca.crl':
  40                 source  => 'puppet:///modules/ssl/clientcerts/ca.crl',
  41         }
  42
  43         exec { 'c_rehash /etc/ssl/debian/certs':
  44                 refreshonly => true,
  45         }
  46 }