From 3877bae6e11a1c85dd682e94cf78faf9cde0688d Mon Sep 17 00:00:00 2001 From: Luca Filipozzi Date: Sun, 12 Jan 2014 09:17:24 +0000 Subject: [PATCH] create a concatenated ssl cert (end-entity cert + intermediate cert) --- modules/roles/manifests/sip.pp | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/modules/roles/manifests/sip.pp b/modules/roles/manifests/sip.pp index ed7aefca..3a7c1491 100644 --- a/modules/roles/manifests/sip.pp +++ b/modules/roles/manifests/sip.pp @@ -1,6 +1,23 @@ class roles::sip { + include concat::setup + ssl::service { 'www.debian.org': } + + concat { '/etc/ssl/debian/certs/www.debian.org-chained.crt': + ensure => present, + } + concat::fragment { '/etc/ssl/debian/certs/www.debian.org.crt': + target => '/etc/ssl/debian/certs/www.debian.org-chained.crt', + source => 'file:///etc/ssl/debian/certs/www.debian.org.crt', + order => 00, + } + concat::fragment { '/etc/ssl/debian/certs/www.debian.org.crt-chain': + target => '/etc/ssl/debian/certs/www.debian.org-chained.crt', + source => 'file:///etc/ssl/debian/certs/www.debian.org.crt-chain', + order => 99, + } + @ferm::rule { 'dsa-sip-ws-ip4': domain => 'ip', description => 'SIP connections (WebSocket; for WebRTC)', -- 2.39.2