42 lines
1.3 KiB
Puppet
42 lines
1.3 KiB
Puppet
# Installing ssl-cert in order to get snakeoil certs
|
|
if ($::osfamily == 'RedHat' and $::operatingsystemmajrelease == '7') {
|
|
exec { 'creates self-signed certificate directory':
|
|
path => '/usr/bin',
|
|
command => 'mkdir -p /etc/ssl/certs',
|
|
creates => '/etc/ssl/certs',
|
|
}
|
|
|
|
exec { 'creates self-signed certificate key directory':
|
|
path => '/usr/bin',
|
|
command => 'mkdir -p /etc/ssl/private',
|
|
creates => '/etc/ssl/private',
|
|
}
|
|
|
|
exec { 'creates self-signed certificate':
|
|
path => '/usr/bin',
|
|
command => 'openssl req \
|
|
-new \
|
|
-newkey rsa:2048 \
|
|
-days 365 \
|
|
-nodes \
|
|
-x509 \
|
|
-subj "/C=US/ST=California/L=San Francisco/O=Dis/CN=localhost" \
|
|
-keyout /etc/ssl/private/ssl-cert-snakeoil.key \
|
|
-out /etc/ssl/certs/ssl-cert-snakeoil.pem',
|
|
creates => ['/etc/ssl/private/ssl-cert-snakeoil.key', '/etc/ssl/certs/ssl-cert-snakeoil.pem'],
|
|
require => [
|
|
Exec['creates self-signed certificate directory'],
|
|
Exec['creates self-signed certificate key directory'],
|
|
],
|
|
}
|
|
|
|
package { 'policycoreutils-python':
|
|
ensure => present,
|
|
}
|
|
}
|
|
elsif ($::osfamily == 'Debian') {
|
|
package { 'ssl-cert':
|
|
ensure => present,
|
|
}
|
|
}
|