Forge Home

ca_cert

Manage system CA certificates

695 downloads

626 latest version

4.7 quality score

We run a couple of automated
scans to help you access a
module's quality. Each module is
given a score based on how well
the author has formatted their
code and documentation and
modules are also checked for
malware using VirusTotal.

Please note, the information below
is for guidance only and neither of
these methods should be considered
an endorsement by Puppet.

Version information

  • 3.1.0 (latest)
  • 3.0.0
released Jun 25th 2024
This version is compatible with:
  • Puppet Enterprise 2023.8.x, 2023.7.x, 2023.6.x, 2023.5.x, 2023.4.x, 2023.3.x, 2023.2.x, 2023.1.x, 2023.0.x, 2021.7.x, 2021.6.x, 2021.5.x, 2021.4.x, 2021.3.x, 2021.2.x, 2021.1.x, 2021.0.x
  • Puppet >= 7.0.0 < 9.0.0
  • , , , , , , , , Archlinux

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'puppet-ca_cert', '3.1.0'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add puppet-ca_cert
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install puppet-ca_cert --version 3.1.0

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download

Documentation

puppet/ca_cert — version 3.1.0 Jun 25th 2024

ca_cert puppet module

Build Status Release Puppet Forge Puppet Forge - downloads Puppet Forge - endorsement Puppet Forge - scores License Donated by Phil Fenstermacher

Table of Contents

  1. Description - What does the module do?
  2. Setup - The basics of getting started with mongodb
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility, etc.
  5. Development - Guide for contributing to the module

Description

The ca_cert module tries to provide a simple way to manage Certificate Authority (CA) certificates on a Linux system.

Usage

On supported OSes custom and OS default CAs can be managed by using the defined type ca_cert::ca. The ca_cert class could be realized to costomize how this module manages the certificates.

Install a custom CA

ca_cert::ca { 'myorg_ca':
  source => 'https://ca.myorg.com/myorg_ca.pem',
}

Manage custom CAs with hiera

---
ca_cert::ca_certs:
  'myorg_ca':
    source: 'https://ca.myorg.com/myorg_ca.pem'
include ca_cert

Distrust a OS default CA

Distrusting OS default CAs is handled differently by different OS families. On Debian/Ubuntu like OSes that support distrusting by using a configuration file the certificate content is not needed. Simply use

ca_cert::ca { 'DigiCert_Global_Root_G3':
  ensure => 'distrusted',
}

On RedHat like OSes that use a folder to manage distrusted default CAs, the certificate source or content has to be provided as well

ca_cert::ca { 'DigiCert_Global_Root_G3':
  ensure => 'distrusted',
  source => 'https://cacerts.digicert.com/DigiCertGlobalRootG3.crt.pem',
}

Ensuring only puppet managed custom CAs are present


class { 'ca_cert':
  purge_unmanaged_CAs => true,
  ca_certs            => {
    ....
  }
}

Limitations

This module has been tested on operating systems in metadata.json

Development

This module is maintained by Vox Pupuli. Voxpupuli welcomes new contributions to this module, especially those that include documentation and rspec tests. We are happy to provide guidance if necessary.

Please see CONTRIBUTING for more details.

Transfer Notice

This module was originally authored by Phil Fenstermacher. The maintainer preferred that Puppet Community take ownership of the module for future improvement and maintenance. Existing pull requests and issues were transferred over, please fork and continue to contribute here instead.

Previously: https://github.com/pcfens/puppet-ca_cert