From 9b912d028fe1a2622ec61a56b1f0774ef3c9f43b Mon Sep 17 00:00:00 2001 From: Ken Barber Date: Sun, 14 Aug 2011 03:47:32 +0200 Subject: (#8925) Added new function called 'get_certificate' for retrieving certificates from a CA (or locally). This function works by either obtaining the file locally or remotely based on Puppets configuration. Also added get_pubkey which wraps get_certificate and extracts the public key. --- spec/fixtures/master_config/.gitignore | 2 ++ spec/fixtures/master_config/auth.conf | 4 ++++ spec/fixtures/master_config/ssl/ca/ca_crl.pem | 8 ++++++++ spec/fixtures/master_config/ssl/ca/ca_crt.pem | 14 ++++++++++++++ spec/fixtures/master_config/ssl/ca/ca_key.pem | 15 +++++++++++++++ spec/fixtures/master_config/ssl/ca/ca_pub.pem | 5 +++++ spec/fixtures/master_config/ssl/ca/inventory.txt | 5 +++++ spec/fixtures/master_config/ssl/ca/private/ca.pass | 1 + spec/fixtures/master_config/ssl/ca/serial | 1 + .../master_config/ssl/ca/signed/bob@mydomain.com.pem | 15 +++++++++++++++ .../fixtures/master_config/ssl/ca/signed/puppetmaster.pem | 15 +++++++++++++++ .../fixtures/master_config/ssl/certs/bob@mydomain.com.pem | 15 +++++++++++++++ spec/fixtures/master_config/ssl/certs/ca.pem | 14 ++++++++++++++ spec/fixtures/master_config/ssl/certs/puppetmaster.pem | 15 +++++++++++++++ spec/fixtures/master_config/ssl/crl.pem | 8 ++++++++ .../master_config/ssl/private_keys/bob@mydomain.com.pem | 15 +++++++++++++++ .../master_config/ssl/private_keys/puppetmaster.pem | 15 +++++++++++++++ .../master_config/ssl/public_keys/bob@mydomain.com.pem | 5 +++++ .../master_config/ssl/public_keys/puppetmaster.pem | 5 +++++ 19 files changed, 177 insertions(+) create mode 100644 spec/fixtures/master_config/.gitignore create mode 100644 spec/fixtures/master_config/auth.conf create mode 100644 spec/fixtures/master_config/ssl/ca/ca_crl.pem create mode 100644 spec/fixtures/master_config/ssl/ca/ca_crt.pem create mode 100644 spec/fixtures/master_config/ssl/ca/ca_key.pem create mode 100644 spec/fixtures/master_config/ssl/ca/ca_pub.pem create mode 100644 spec/fixtures/master_config/ssl/ca/inventory.txt create mode 100644 spec/fixtures/master_config/ssl/ca/private/ca.pass create mode 100644 spec/fixtures/master_config/ssl/ca/serial create mode 100644 spec/fixtures/master_config/ssl/ca/signed/bob@mydomain.com.pem create mode 100644 spec/fixtures/master_config/ssl/ca/signed/puppetmaster.pem create mode 100644 spec/fixtures/master_config/ssl/certs/bob@mydomain.com.pem create mode 100644 spec/fixtures/master_config/ssl/certs/ca.pem create mode 100644 spec/fixtures/master_config/ssl/certs/puppetmaster.pem create mode 100644 spec/fixtures/master_config/ssl/crl.pem create mode 100644 spec/fixtures/master_config/ssl/private_keys/bob@mydomain.com.pem create mode 100644 spec/fixtures/master_config/ssl/private_keys/puppetmaster.pem create mode 100644 spec/fixtures/master_config/ssl/public_keys/bob@mydomain.com.pem create mode 100644 spec/fixtures/master_config/ssl/public_keys/puppetmaster.pem (limited to 'spec/fixtures') diff --git a/spec/fixtures/master_config/.gitignore b/spec/fixtures/master_config/.gitignore new file mode 100644 index 0000000..7d4e912 --- /dev/null +++ b/spec/fixtures/master_config/.gitignore @@ -0,0 +1,2 @@ +manifests/ +var/ diff --git a/spec/fixtures/master_config/auth.conf b/spec/fixtures/master_config/auth.conf new file mode 100644 index 0000000..aecb32e --- /dev/null +++ b/spec/fixtures/master_config/auth.conf @@ -0,0 +1,4 @@ +path /certificate/ +auth no +method find +allow * diff --git a/spec/fixtures/master_config/ssl/ca/ca_crl.pem b/spec/fixtures/master_config/ssl/ca/ca_crl.pem new file mode 100644 index 0000000..90c7a03 --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/ca_crl.pem @@ -0,0 +1,8 @@ +-----BEGIN X509 CRL----- +MIH5MGQCAQEwDQYJKoZIhvcNAQEFBQAwIjEgMB4GA1UEAwwXUHVwcGV0IENBOiBw +dXBwZXRtYXN0ZXIXDTExMDgxMzIwMDAwOFoXDTE2MDgxMTIwMDAwOFqgDjAMMAoG +A1UdFAQDAgEAMA0GCSqGSIb3DQEBBQUAA4GBACBHLkJD4RvEV75ak8w468Kq7r5p +s87Fzs0Vj2fgqH/3GPoazwBD4R0TvqMb+NUuF0WnipexdQQRjaiERmqX9aIhRjRA +vs4ItdoxAvcgCzWs6cYm/e4SAAqY5lipfJqd+aRlQgzWaj6WDbFMVEKvqMXqM5wU +gGQRYVnXHbohA+/I +-----END X509 CRL----- diff --git a/spec/fixtures/master_config/ssl/ca/ca_crt.pem b/spec/fixtures/master_config/ssl/ca/ca_crt.pem new file mode 100644 index 0000000..7910b2b --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/ca_crt.pem @@ -0,0 +1,14 @@ +-----BEGIN CERTIFICATE----- +MIICMzCCAZygAwIBAgIBATANBgkqhkiG9w0BAQUFADAiMSAwHgYDVQQDDBdQdXBw +ZXQgQ0E6IHB1cHBldG1hc3RlcjAeFw0xMTA4MTIyMDAwMDhaFw0xNjA4MTAyMDAw +MDhaMCIxIDAeBgNVBAMMF1B1cHBldCBDQTogcHVwcGV0bWFzdGVyMIGfMA0GCSqG +SIb3DQEBAQUAA4GNADCBiQKBgQDA6rbkI3p/YmrjE5ZNwuCPRfqUtywnBHqClp2o +nBgqrBZiKitxAmdEH4lidGA9AbiNnBiMh0fC4s5sKAUZUjPjv1I7VBqrueYWKnKP +1IBuggaJDoUQysj73XxPUnfFiuBuDVO+FEjLCrbB7WCfdli3KuueUJjHbcLyUh0n +o2ceMwIDAQABo3kwdzA4BglghkgBhvhCAQ0EKxYpUHVwcGV0IFJ1YnkvT3BlblNT +TCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4E +FgQUB14U4FLr4JVibAmnV+n+kw85ck4wCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEB +BQUAA4GBAAZ3wF7R8DDhhT31OGQ/A+/F3L59nStqvW7AD7EabrTDPPNOVcvt/las +oi4MXiBuGPgS/xg+n4YBREaaYoF8BcGx5YMPY1XOPS0DItnDl44Wd+eHraD69kLl +l/4pPMlE5PQ21o82dph3i6B1E5zwLxhMXzh1mfvDcCIMmRdVobQm +-----END CERTIFICATE----- diff --git a/spec/fixtures/master_config/ssl/ca/ca_key.pem b/spec/fixtures/master_config/ssl/ca/ca_key.pem new file mode 100644 index 0000000..d073e22 --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/ca_key.pem @@ -0,0 +1,15 @@ +-----BEGIN RSA PRIVATE KEY----- +MIICXAIBAAKBgQDA6rbkI3p/YmrjE5ZNwuCPRfqUtywnBHqClp2onBgqrBZiKitx +AmdEH4lidGA9AbiNnBiMh0fC4s5sKAUZUjPjv1I7VBqrueYWKnKP1IBuggaJDoUQ +ysj73XxPUnfFiuBuDVO+FEjLCrbB7WCfdli3KuueUJjHbcLyUh0no2ceMwIDAQAB +AoGAdJRieXNHL3uWBCtuBQfjFDHBv+UBdYKrVgcWtzG9GOxtilzZa618Ihq8txaE +odlMYacW3rVRlF/jRlDY4/hdChKO0PwffYzMmMklora8knG4Epi3LbMsVYCpbmvr +AYNKkvAnTbSF/PQMq8hTRnRf8cL8KU6e0uFFiOfx0pc+YyECQQDyod+VtRiOxWM1 +/FE2eZpihibAiB0HV9VJuXW23WwKh2fIqHs2oQXzjvzjiDV+LiZu51L21hQQcAeH +hMrNWRI/AkEAy4ulVjGybS0FqCvOX8UllJZBkN2z266HRag5a90TG0a0PEb0L+5Y +3rokNTZAzxdrCxkHaLRXQ9PE7b3c/1CPDQJAWNeW491swZJbMoBSSG0cb6kJdYQh +hPfPXHBxPuUy02QjR2ERxL4PTNB1nubYF3zUi9VeFo3qyN4Mk722+Jv9xwJADK8j +Gn/2Un9fvt8b+TPb56qFY3WtY584psqY6XPZYPXC/Y6eYO5Fc3u+DeLXnxAih4qD +v66dUYi82OPgBbkLcQJBAIFwHWNgrDZqSp8KBOldRUdwt2MkG3QzRiMziP8DczXF +xvdxH+AHPWl7yzOLas/kgx23ozQZcTzNqFjDmnSrJZQ= +-----END RSA PRIVATE KEY----- diff --git a/spec/fixtures/master_config/ssl/ca/ca_pub.pem b/spec/fixtures/master_config/ssl/ca/ca_pub.pem new file mode 100644 index 0000000..2ba33aa --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/ca_pub.pem @@ -0,0 +1,5 @@ +-----BEGIN RSA PUBLIC KEY----- +MIGJAoGBAMDqtuQjen9iauMTlk3C4I9F+pS3LCcEeoKWnaicGCqsFmIqK3ECZ0Qf +iWJ0YD0BuI2cGIyHR8LizmwoBRlSM+O/UjtUGqu55hYqco/UgG6CBokOhRDKyPvd +fE9Sd8WK4G4NU74USMsKtsHtYJ92WLcq655QmMdtwvJSHSejZx4zAgMBAAE= +-----END RSA PUBLIC KEY----- diff --git a/spec/fixtures/master_config/ssl/ca/inventory.txt b/spec/fixtures/master_config/ssl/ca/inventory.txt new file mode 100644 index 0000000..51ed4af --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/inventory.txt @@ -0,0 +1,5 @@ +# Inventory of signed certificates +# SERIAL NOT_BEFORE NOT_AFTER SUBJECT +0x0001 2011-08-12T20:00:08GMT 2016-08-10T20:00:08GMT /CN=Puppet CA: puppetmaster +0x0002 2011-08-12T20:00:08GMT 2016-08-10T20:00:08GMT /CN=puppetmaster +0x0003 2011-08-12T20:01:09GMT 2016-08-10T20:01:09GMT /CN=bob@mydomain.com diff --git a/spec/fixtures/master_config/ssl/ca/private/ca.pass b/spec/fixtures/master_config/ssl/ca/private/ca.pass new file mode 100644 index 0000000..234a5b9 --- /dev/null +++ b/spec/fixtures/master_config/ssl/ca/private/ca.pass @@ -0,0 +1 @@ +[Ie3rqTiZfur`@gLW5