Revision 5f2f0557
Added by Ivan Necas about 10 years ago
| manifests/init.pp | ||
|---|---|---|
|
strip => true,
|
||
|
key_pair => $default_ca
|
||
|
} ~>
|
||
|
privkey { $ca_key:
|
||
|
key_pair => $default_ca,
|
||
|
unprotect => true,
|
||
|
password_file => $ca_key_password_file
|
||
|
} ~>
|
||
|
file { $ca_key:
|
||
|
ensure => file,
|
||
|
owner => 'root',
|
||
|
group => $certs::group,
|
||
|
mode => '0440',
|
||
|
} ~>
|
||
|
file { $ca_cert:
|
||
|
ensure => file,
|
||
|
owner => 'root',
|
||
|
group => $certs::group,
|
||
|
mode => '0644',
|
||
|
}
|
||
|
}
|
||
|
|
||
|
if $generate {
|
||
|
Ca[$default_ca_name] ~>
|
||
|
privkey { $ca_key:
|
||
|
key_pair => $default_ca,
|
||
|
unprotect => true,
|
||
|
password_file => $ca_key_password_file
|
||
|
} ~>
|
||
|
file { $ca_key:
|
||
|
ensure => file,
|
||
|
owner => 'root',
|
||
|
group => $certs::group,
|
||
|
mode => '0440',
|
||
|
}
|
||
|
}
|
||
|
}
|
||
|
}
|
||
Also available in: Unified diff
Refs #5423 - fix certs generation for capsule usage
Also, disable setting of katello repo for the certs till we support
package uploads again.