summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-02-01provide an owner to x509::key, defaulting to rootHEADmasterMicah Anderson
2013-01-31overriding the group in a define that isn't part of a class is difficult, soMicah Anderson
instead of requiring you to do that if you wish to have an application to have access to the key file, you can pass an alternate to the default group = 'ssl-cert'
2013-01-31change permissions on key directory to allow for non-root applications access toMicah Anderson
key files, if the application is in both the 'ssl-cert' group as well as its own group (eg. 'imapd') In this configuration you would override the key class to change the owner of the installed key to be the group of the service (ie. 'imapd') and then the application can read the key file. This adjusts this module to adhere to the changes on http://wiki.debian.org/X.509
2012-11-27remove dependency on openssl packageMicah Anderson
2012-11-27missed one source -> content changeMicah Anderson
2012-11-26fix incorrectly specifed openssl packageMicah Anderson
2012-11-26fix incorrectly specified source param, should be contentMicah Anderson
2012-11-26fix syntax errorMicah Anderson
2012-11-22add more flexible source/content optionsMicah Anderson
this makes it so you can do one of a few things: 1. pass no $content, or $source and the default will be taken (search path checking first for site_x509/{CAs,keys,certs}/$::fqdn/${name}.crt, secondly for site_x509/{CAs,keys,certs}/${name}.crt 2. pass $content, allowing you to specify templates etc. 3. pass $source, allowing you to specify any source you wish
2012-11-22fix cert variable nameMicah Anderson
2012-11-22Initial commitMicah Anderson