Module: PuppetX::Certs::Provider::Keystore

Defined in:
lib/puppet_x/certs/provider/keystore.rb

Instance Method Summary collapse

Instance Method Details

#create ⇒ Object 



5
6
7
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 5

def create
  generate_keystore
end

#delete_keystore ⇒ Object 



76
77
78
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 76

def delete_keystore
  File.rm(store)
end

#destroy ⇒ Object 



9
10
11
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 9

def destroy
  delete_keystore
end

#exists? ⇒ Boolean

Returns:

  • (Boolean) 


13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 13

def exists?
  return false unless File.exist?(store)

  begin
    keytool(
      '-list',
      '-keystore', store,
      '-storepass:file', resource[:password_file],
    )
  rescue Puppet::ExecutionFailure => e
    if e.message.include?('java.security.UnrecoverableKeyException') || e.message.include?('keystore password was incorrect')
      Puppet.debug("Invalid password for #{store}")
      return false
    else
      Puppet.log_exception(e, "Failed to read keystore '#{store}'")
    end
  end

  true
end

#generate_keystore ⇒ Object 



42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 42

def generate_keystore
  temp_alias = 'temporary-entry'

  FileUtils.rm_f(store)

  begin
    keytool(
      '-genkey',
      '-storetype', 'pkcs12',
      '-keystore', store,
      '-storepass:file', resource[:password_file],
      '-alias', temp_alias,
      '-dname', "CN=#{temp_alias}",
      '-J-Dcom.redhat.fips=false'
    )
  rescue Puppet::ExecutionFailure => e
    Puppet.err("Failed to generate new #{type} with temporary entry: #{e}")
    return nil
  end

  begin
    keytool(
      '-delete',
      '-keystore', store,
      '-storepass:file', resource[:password_file],
      '-alias', temp_alias,
      '-J-Dcom.redhat.fips=false'
    )
  rescue Puppet::ExecutionFailure => e
    Puppet.err("Failed to delete temporary entry when generating empty #{type}: #{e}")
    return nil
  end
end

#store ⇒ Object 



34
35
36
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 34

def store
  resource[:keystore]
end

#type ⇒ Object 



38
39
40
 
# File 'lib/puppet_x/certs/provider/keystore.rb', line 38

def type
  'keystore'
end