Class Puppet::SSLCertificates::CA
In: lib/puppet/sslcertificates/ca.rb
Parent: Object

Methods

certfile   clean   genpass   getcert   getclientcert   getclientcsr   getpass   host2certfile   host2csrfile   list   list_signed   mkrootcert   new   removeclientcsr   revoke   setconfig   sign   storeclientcert   storeclientcsr   thing2name   ttl  

Included Modules

Puppet::Util::Warnings

Constants

Certificate = Puppet::SSLCertificates::Certificate

Attributes

cert  [RW] 
config  [RW] 
crl  [RW] 
dir  [RW] 
file  [RW] 
keyfile  [RW] 

Public Class methods

Public Instance methods

clean(host)

Remove all traces of a given host. This is kind of hackish, but, eh.

genpass()

Generate a new password for the CA.

getcert()

Get the CA cert.

getclientcert(host)

Retrieve a client‘s certificate.

getclientcsr(host)

Retrieve a client‘s CSR.

getpass()

Get the CA password.

host2certfile(hostname)

this stores signed certs in a directory unrelated to normal client certs

list(dummy_argument=:work_arround_for_ruby_GC_bug)

List certificates waiting to be signed. This returns a list of hostnames, not actual files — the names can be converted to full paths with host2csrfile.

list_signed(dummy_argument=:work_arround_for_ruby_GC_bug)

List signed certificates. This returns a list of hostnames, not actual files — the names can be converted to full paths with host2csrfile.

mkrootcert()

Create the root certificate.

revoke(serial, reason = OpenSSL::OCSP::REVOKED_STATUS_KEYCOMPROMISE)

Revoke the certificate with serial number SERIAL issued by this CA. The REASON must be one of the OpenSSL::OCSP::REVOKED_* reasons

setconfig(hash)

Take the Puppet config and store it locally.

sign(csr)

Sign a given certificate request.

storeclientcert(cert)

Store the certificate that we generate.

storeclientcsr(csr)

Store the client‘s CSR for later signing. This is called from server/ca.rb, and the CSRs are deleted once the certificate is actually signed.

thing2name(thing)

Turn our hostname into a Name object

ttl()

TTL for new certificates in seconds. If config param :ca_ttl is set, use that, otherwise use :ca_days for backwards compatibility

[Validate]