From ac59107f714fb5b88dc872124a29ffc926d81990 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@riseup.net>
Date: Sat, 10 Aug 2013 19:53:21 +0200
Subject: improve optional monkeysphere support by enabling the cert generation
 without monkeysphere

---
 manifests/base.pp | 28 ++++++++++++++++------------
 1 file changed, 16 insertions(+), 12 deletions(-)

diff --git a/manifests/base.pp b/manifests/base.pp
index 6f28d12..165de0f 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -1,25 +1,29 @@
 # manage strongswan services
 class strongswan::base {
 
-  if $use_monkeysphere {
     package { 'strongswan':
       ensure  => installed,
-      require => Package['monkeysphere','gnutls-utils'],
-      } ->
+    } ->
 
-      exec { 'ipsec_privatekey':
-        command => "certtool --generate-privkey --bits 2048 --outfile ${strongswan::cert_dir}/private/${::fqdn}.pem",
-        creates => "${strongswan::cert_dir}/private/${::fqdn}.pem";
-      } ->
+    exec { 'ipsec_privatekey':
+      command => "certtool --generate-privkey --bits 2048 --outfile ${strongswan::cert_dir}/private/${::fqdn}.pem",
+      creates => "${strongswan::cert_dir}/private/${::fqdn}.pem";
+    } ->
+
+    anchor{'strongswan::certs::done': }
+
+    if $use_monkeysphere {
+
+      Package['strongswan'] {
+        require => Package['monkeysphere','gnutls-utils'],
+      }
 
       exec { 'ipsec_monkeysphere_cert':
         command => "monkeysphere-host import-key ${strongswan::cert_dir}/private/${::fqdn}.pem ike://${::fqdn} && gpg --homedir /var/lib/monkeysphere/host -a --export =ike://${::fqdn} > ${strongswan::cert_dir}/certs/${::fqdn}.asc",
         creates => "${strongswan::cert_dir}/certs/${::fqdn}.asc",
-        } -> anchor{'strongswan::certs::done': }
-  } else {
-    package { 'strongswan':
-      ensure  => installed,
-    }
+        require => Exec['ipsec_privatekey'],
+        before  => Anchor['strongswan::certs::done'],
+      }
   }
 
   File {
-- 
cgit v1.2.3