Revision b2bcdf5f
Added by Ivan Necas over 10 years ago
manifests/certs.pp | ||
---|---|---|
$keystore = '/etc/pki/katello/keystore',
|
||
$keystore_password_file = undef,
|
||
$keystore_password = undef,
|
||
$candlepin_certs_dir = $certs::params::candlepin_certs_dir,
|
||
$candlepin_ca_password_file = $certs::params::candlepin_ca_password_file,
|
||
$candlepin_certs_dir = $certs::params::candlepin_certs_dir
|
||
) {
|
||
|
||
Exec { logoutput => 'on_failure' }
|
||
... | ... | |
exec { 'add-candlepin-cert-to-nss-db':
|
||
command => "certutil -A -d '${::certs::nss_db_dir}' -n 'ca' -t 'TCu,Cu,Tuw' -a -i '${ca_cert}'",
|
||
path => '/usr/bin',
|
||
require => Exec['create-nss-db'],
|
||
subscribe => Exec['create-nss-db'],
|
||
refreshonly => true,
|
||
}
|
||
|
Also available in: Unified diff
Add ca to nssdb everytime the nssdb is recreated