Puppet Class: openssl::configs

Defined in:
manifests/configs.pp

Overview

Class: openssl::configs

Generates openssl.conf files using defaults

Parameters

owner

default owner for the configuration files

group

default group for the configuration files

mode

default mode for the configuration files

country

default value for country

state

default value for state

locality

default value for locality

organization

default value for organization

unit

default value for unit

email

default value for email

default_bits

default key size to generate

default_md

default message digest to use

default_keyfile

default name for the keyfile

basicconstraints

version 3 certificate extension basic constraints

extendedkeyusages

version 3 certificate extension extended key usage

keyusages

version 3 certificate extension key usage

subjectaltnames

version 3 certificate extension for alternative names currently supported are IP (v4) and DNS

conffiles

config files to generate

Example

class { '::openssl::configs':
  conffiles => { '/path/to/openssl.conf' => { ensure     => 'present',
                                              commonname => 'somewhere.org',},
                 '/a/other/openssl.conf' => { ensure     => 'present',
                                              commonname => 'somewhere.else.org' },
                }
}

Parameters:

  • owner (String) (defaults to: 'root')
  • group (String) (defaults to: 'root')
  • mode (String) (defaults to: '0640')
  • country (Optional[String]) (defaults to: undef)
  • state (Optional[String]) (defaults to: undef)
  • locality (Optional[String]) (defaults to: undef)
  • organization (Optional[String]) (defaults to: undef)
  • unit (Optional[String]) (defaults to: undef)
  • email (Optional[String]) (defaults to: undef)
  • default_bits (Integer) (defaults to: 4096)
  • default_md (String) (defaults to: 'sha512')
  • default_keyfile (String) (defaults to: 'privkey.pem')
  • basicconstraints (Optional[Array]) (defaults to: undef)
  • extendedkeyusages (Optional[Array]) (defaults to: undef)
  • keyusages (Optional[Array]) (defaults to: undef)
  • subjectaltnames (Optional[Array]) (defaults to: undef)
  • conffiles (Hash) (defaults to: {}) 


52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
 
# File 'manifests/configs.pp', line 52

class openssl::configs (
  String            $owner             = 'root',
  String            $group             = 'root',
  String            $mode              = '0640',
  Optional[String]  $country           = undef,
  Optional[String]  $state             = undef,
  Optional[String]  $locality          = undef,
  Optional[String]  $organization      = undef,
  Optional[String]  $unit              = undef,
  Optional[String]  $email             = undef,
  Integer           $default_bits      = 4096,
  String            $default_md        = 'sha512',
  String            $default_keyfile   = 'privkey.pem',
  Optional[Array]   $basicconstraints  = undef,
  Optional[Array]   $extendedkeyusages = undef,
  Optional[Array]   $keyusages         = undef,
  Optional[Array]   $subjectaltnames   = undef,
  Hash              $conffiles         = {},
){

  # dpendencies: ensure config file is generated before potential usage
  File<| tag=='openssl-configs' |> -> Ssl_pkey<| |>
  File<| tag=='openssl-configs' |> -> X509_cert<| |>
  File<| tag=='openssl-configs' |> -> X509_request<| |>

  $conffiles.each |String $filename, Hash $vals| {
    file { $filename:
      ensure  => pick($vals['ensure'], 'present'),
      owner   => pick($vals['owner'], $owner),
      group   => pick($vals['group'], $group),
      mode    => pick($vals['mode'], $mode),
      content => epp('openssl/cert.cnf.epp', {
        country           => $country,
        state             => $state,
        locality          => $locality,
        organization      => $organization,
        unit              => $unit,
        email             => $email,
        default_bits      => $default_bits,
        default_md        => $default_md,
        default_keyfile   => $default_keyfile,
        basicconstraints  => $basicconstraints,
        extendedkeyusages => $extendedkeyusages,
        keyusages         => $keyusages,
        subjectaltnames   => $subjectaltnames,
      } + delete($vals,['ensure', 'owner', 'group', 'mode']),
    ),
      tag     => 'openssl-configs',
    }
  }
}