a32f34b408
Knife-Zero doesn't include Berkshelf support, so vendoring everything in the repo is convenient again
46 lines
2.1 KiB
Ruby
46 lines
2.1 KiB
Ruby
#
|
|
# Copyright:: Copyright 2018, Chef Software Inc.
|
|
# License:: Apache License, Version 2.0
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
chef_version_for_provides '< 14.4' if respond_to?(:chef_version_for_provides)
|
|
resource_name :openssl_ec_public_key
|
|
|
|
include OpenSSLCookbook::Helpers
|
|
|
|
property :path, String, name_property: true
|
|
property :private_key_path, String
|
|
property :private_key_content, String
|
|
property :private_key_pass, String
|
|
property :owner, String
|
|
property :group, String
|
|
property :mode, [Integer, String], default: '0640'
|
|
|
|
action :create do
|
|
raise ArgumentError, "You cannot specify both 'private_key_path' and 'private_key_content' properties at the same time." if new_resource.private_key_path && new_resource.private_key_content
|
|
raise ArgumentError, "You must specify the private key with either 'private_key_path' or 'private_key_content' properties." unless new_resource.private_key_path || new_resource.private_key_content
|
|
raise "#{new_resource.private_key_path} not a valid private EC key or password is invalid" unless priv_key_file_valid?((new_resource.private_key_path || new_resource.private_key_content), new_resource.private_key_pass)
|
|
|
|
ec_key_content = gen_ec_pub_key((new_resource.private_key_path || new_resource.private_key_content), new_resource.private_key_pass)
|
|
|
|
file new_resource.path do
|
|
action :create
|
|
owner new_resource.owner unless new_resource.owner.nil?
|
|
group new_resource.group unless new_resource.group.nil?
|
|
mode new_resource.mode
|
|
content ec_key_content
|
|
end
|
|
end
|