Re: [Puppet Users] SSL Cert automation for service

2015-01-06 Thread Felix Frank
Hi, I haven't built this kind of scheme, but yes, Puppet should be able to do this for you. You will have to implement 1. A defined type that signs a cert for a given CN. 2. A custom fact that holds all signed certificates in a hash structure suitable for 3. A defined type that wraps the export o

[Puppet Users] SSL Cert automation for service

2015-01-04 Thread Tom Noonan
Hello, list: I'm looking for information/tutorials on using Puppet to generate SSL certs for a service managed by Puppet, not Puppet itself. What I would like to do is give Puppet access to internal CA keys and have it generate and sign certs for services it manages. This will allow me to use