kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 26 Pull Requests 2 Projects 2 Activity

Pass an empty passphrase on the command line for the p12 cert

Browse Source
This commit is contained in:
Greg Karékinian 2019-12-04 17:32:40 +01:00
parent 9d9493af0d
commit 632cb38aab
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
site-cookbooks/kosmos-dirsrv/resources/instance.rb
View File

@ -70,8 +70,9 @@ action :create do
action :nothing action :nothing
end end
unless node.chef_environment == "development" unless node.chef_environment == "development"
package "libnss3-tools" # provides pk12util
cookbook_file "#{Chef::Config[:file_cache_path]}/tls.ldif" do cookbook_file "#{Chef::Config[:file_cache_path]}/tls.ldif" do
source "tls.ldif" source "tls.ldif"
owner "root" owner "root"
@ -87,13 +88,13 @@ action :create do
# Merge the full chain and private key into one cert, to import into the # Merge the full chain and private key into one cert, to import into the
# dirsrv dir # dirsrv dir
execute "generate p12 cert" do execute "generate p12 cert" do
command "openssl pkcs12 -export -in /etc/letsencrypt/live/#{new_resource.hostname}/fullchain.pem -inkey /etc/letsencrypt/live/#{new_resource.hostname}/privkey.pem -out #{Chef::Config[:file_cache_path]}/#{new_resource.hostname}.p12 -name 'Server-Cert'" command "openssl pkcs12 -export -in /etc/letsencrypt/live/#{new_resource.hostname}/fullchain.pem -inkey /etc/letsencrypt/live/#{new_resource.hostname}/privkey.pem -out #{Chef::Config[:file_cache_path]}/#{new_resource.hostname}.p12 -name 'Server-Cert' -passout pass:"
action :nothing action :nothing
notifies :run, "execute[import p12 cert]", :immediately notifies :run, "execute[import p12 cert]", :immediately
end end
execute "import p12 cert" do execute "import p12 cert" do
command "pk12util -i #{Chef::Config[:file_cache_path]}/#{new_resource.hostname}.p12 -d #{inst_dir}" command "pk12util -i #{Chef::Config[:file_cache_path]}/#{new_resource.hostname}.p12 -d #{inst_dir} -W ''"
action :nothing action :nothing
notifies :run, "execute[add tls config]", :immediately notifies :run, "execute[add tls config]", :immediately
end end