1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
class openssl {
class base {
package { 'openssl': }
}
define self_signed_cert($directory = '/etc/certs') {
include openssl::base
$pem_file = "$name.pem"
exec { "openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout $pem_file -out $pem_file -subj '/CN=$name'":
cwd => $directory,
creates => "$directory/$name.pem",
require => Package['openssl']
}
}
define self_signed_splitted_cert( $filename = '',
$directory = '/etc/certs',
$owner = 'root',
$group = 'root',
$mode = '0600') {
include openssl::base
$crt_file = "$filename.crt"
$key_file = "$filename.key"
exec { "openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout $key_file -out $crt_file -subj '/CN=$name'":
cwd => $directory,
creates => "$directory/$key_file",
require => Package['openssl'],
before => [File["$directory/$key_file"],
File["$directory/$crt_file"]]
}
file { ["$directory/$key_file","$directory/$crt_file"]:
owner => $owner,
group => $group,
mode => $mode,
}
}
}
|
