diff options
| author | varac <varacanero@zeromail.org> | 2012-12-10 22:54:47 +0100 |
|---|---|---|
| committer | varac <varacanero@zeromail.org> | 2012-12-10 22:54:47 +0100 |
| commit | c8dda5249aa146239dd681db98da2c273dd07d77 (patch) | |
| tree | 5cde94b15971365f59ad8387b7205fb6434e34ec /puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb | |
| parent | 62381f11d920a738db6fa673ea29cf4cddd8ebe0 (diff) | |
updated leap_ca_daemon config file, deploying x509 cert+key
Diffstat (limited to 'puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb')
| -rw-r--r-- | puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb b/puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb new file mode 100644 index 00000000..e0b95278 --- /dev/null +++ b/puppet/modules/site_ca_daemon/templates/leap_ca.yaml.erb @@ -0,0 +1,31 @@ +# +# Default configuration options for LEAP Certificate Authority Daemon +# + +# +# Certificate Authority +# +ca_key_path: "/etc/x509/keys/leap_ca_daemon.key" +ca_key_password: nil +ca_cert_path: "/etc/x509/certs/leap_ca_daemon.crt" + +# +# Certificate pool +# +max_pool_size: 100 +client_cert_lifespan: 2 +client_cert_bit_size: 2024 +client_cert_hash: "SHA256" + +# +# Database +# +db_name: "client_certificates" +couch_connection: + protocol: "https" + host: <%= couchdb_host %> + port: 6984 + username: <%= couchdb_user %> + password: <%= couchdb_password %> + prefix: "" + suffix: "" |