define x509::ca (
  $source = "puppet:///modules/site_x509/files/CAs/${name}.crt"
) {
  include x509::variables
  include x509::base

  file { "${x509::variables::local_CAs}/${name}.crt" :
    ensure  => file,
    mode    => '0444',
    group   => 'ssl-cert',
    source  => $source,
    require => [ Package['openssl'], Package['ca-certificates'] ],
    notify  => Exec['update-ca-certificates'],
  }
}