summaryrefslogtreecommitdiff
path: root/puppet/modules/site_config
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2013-09-19 12:29:15 +0200
committervarac <varacanero@zeromail.org>2013-09-19 12:29:15 +0200
commitc68399c019d09a4c8ba44f47936b4b3842802177 (patch)
tree01157d9d76de8e753e25da376224b7da58e47e91 /puppet/modules/site_config
parent1ce6cb5a30c5ee73d6474ac9c1bbd4c7819d9a73 (diff)
tidy openvpn x509 definitions (#3831)
Diffstat (limited to 'puppet/modules/site_config')
-rw-r--r--puppet/modules/site_config/manifests/x509/ca_bundle.pp6
1 files changed, 6 insertions, 0 deletions
diff --git a/puppet/modules/site_config/manifests/x509/ca_bundle.pp b/puppet/modules/site_config/manifests/x509/ca_bundle.pp
index 204f0a5e..4cbe574a 100644
--- a/puppet/modules/site_config/manifests/x509/ca_bundle.pp
+++ b/puppet/modules/site_config/manifests/x509/ca_bundle.pp
@@ -1,5 +1,11 @@
class site_config::x509::ca_bundle {
+ # CA bundle -- we want to have the possibility of allowing multiple CAs.
+ # For now, the reason is to transition to using client CA. In the future,
+ # we will want to be able to smoothly phase out one CA and phase in another.
+ # I tried "--capath" for this, but it did not work.
+
+
$x509 = hiera('x509')
$ca = $x509['ca_cert']
$client_ca = $x509['client_ca_cert']