Puppet Class: classroom_legacy::cacert

Defined in:
manifests/cacert.pp

Overview



1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
# File 'manifests/cacert.pp', line 1

class classroom_legacy::cacert {
  assert_private('This class should not be called directly')

  $classroom_cert = '/etc/pki/ca-trust/source/anchors/classroom.crt'

  if $::osfamily != 'windows' {
    file { $classroom_cert:
      ensure => file,
      source => "${classroom_legacy::confdir}/ssl/certs/ca.pem",
    }

    exec { 'trust classroom ca':
      command     => '/usr/bin/update-ca-trust extract',
      onlyif      => '/usr/bin/update-ca-trust enable',
      refreshonly => true,
    }

    if versioncmp($::aio_agent_version, '1.3.2') >= 0 {
      exec { 'add classroom cert to vendored curl':
        command     => "cat ${classroom_cert} >> /opt/puppetlabs/puppet/ssl/cert.pem ",
        path        => '/bin/',
        refreshonly => true,
        subscribe   => File[$classroom_cert],
        notify      => Exec['trust classroom ca'],
      }
    }
    else {
      File[$classroom_cert] ~> Exec['trust classroom ca']
    }
  }
  else {
    # We don't need this for windows yet.
  }
}