diff options
author | varac <varacanero@zeromail.org> | 2016-06-09 17:35:16 +0200 |
---|---|---|
committer | varac <varacanero@zeromail.org> | 2016-06-14 12:05:18 +0200 |
commit | d23f3dba54e8ec7d8ceeee03a011529f699cc31a (patch) | |
tree | 6a34d976979ca7a0eced2564eeb4cf031f5a17c8 /puppet/modules/x509/manifests/base.pp | |
parent | bfb413191999127e01699873ba061f91935fb9c3 (diff) |
git subrepo clone https://leap.se/git/puppet_x509 puppet/modules/x509
subrepo:
subdir: "puppet/modules/x509"
merged: "19254a3"
upstream:
origin: "https://leap.se/git/puppet_x509"
branch: "master"
commit: "19254a3"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo.git"
commit: "cb2995b"
Diffstat (limited to 'puppet/modules/x509/manifests/base.pp')
-rw-r--r-- | puppet/modules/x509/manifests/base.pp | 45 |
1 files changed, 45 insertions, 0 deletions
diff --git a/puppet/modules/x509/manifests/base.pp b/puppet/modules/x509/manifests/base.pp new file mode 100644 index 00000000..b88cce64 --- /dev/null +++ b/puppet/modules/x509/manifests/base.pp @@ -0,0 +1,45 @@ +class x509::base { + include x509::variables + + package { [ 'ssl-cert', 'ca-certificates' ]: + ensure => installed; + } + + group { 'ssl-cert': + ensure => present, + system => true, + require => Package['ssl-cert']; + } + + file { + $x509::variables::root: + ensure => directory, + mode => '0755', + owner => root, + group => root; + + $x509::variables::keys: + ensure => directory, + mode => '0750', + owner => root, + group => ssl-cert; + + $x509::variables::certs: + ensure => directory, + mode => '0755', + owner => root, + group => root; + + $x509::variables::local_CAs: + ensure => directory, + mode => '2775', + owner => root, + group => root; + } + + exec { 'update-ca-certificates': + command => '/usr/sbin/update-ca-certificates', + refreshonly => true, + subscribe => File[$x509::variables::local_CAs] + } +} |