fetchcrl

Intalls and configure fetch-crl

24,448 downloads

53 latest version

Version information

  • 8.0.0 (latest)
  • 7.0.0
  • 6.0.0
  • 5.1.0
  • 5.0.0
  • 4.1.0
  • 4.0.0
  • 3.0.0
  • 2.1.1
  • 2.1.0
  • 2.0.1
  • 2.0.0
  • 1.2.0
  • 1.1.1
released May 8th 2025
This version is compatible with:
  • Puppet Enterprise 2025.3.x, 2025.2.x, 2025.1.x, 2023.8.x, 2023.7.x, 2023.6.x, 2023.5.x, 2023.4.x, 2023.3.x, 2023.2.x, 2023.1.x, 2023.0.x, 2021.7.x, 2021.6.x, 2021.5.x, 2021.4.x, 2021.3.x, 2021.2.x, 2021.1.x, 2021.0.x
  • Puppet >= 7.0.0 < 9.0.0
  • , , , , , ,

Start using this module

  • r10k or Code Manager
  • Bolt
  • Manual installation
  • Direct download

Add this module to your Puppetfile:

mod 'puppet-fetchcrl', '8.0.0'
Learn more about managing modules with a Puppetfile

Add this module to your Bolt project:

bolt module add puppet-fetchcrl
Learn more about using this module with an existing project

Manually install this module globally with Puppet module tool:

puppet module install puppet-fetchcrl --version 8.0.0

Direct download is not typically how you would use a Puppet module to manage your infrastructure, but you may want to download the module in order to inspect the code.

Download
Tags: grid, x509, crl

Documentation

puppet/fetchcrl — version 8.0.0 May 8th 2025

FetchCRL module for Puppet

CI Code Coverage Puppet Forge Puppet Forge - downloads Puppet Forge - endorsement Puppet Forge - scores

This is the fetchcrl Puppet module. It configures fetch-crl version 3 wherever it can.

Fetchcrl utility will retrieve certificate revocation lists (CRLs) for a set of installed trust anchors, based on crl_url files or IGTF-style info files.

This module obsoletes CernOps-fetchcrl-1.1.0

Examples

class { 'fetchcrl':
  http_proxy            => 'http:://squid.example.org:8000',
  carepo                => 'http://yum.example.org/yumrepo',
  cache_control_request => '3600',
}

fetchcrl::ca { 'EDG-Tutorial-CA':
 agingtolerance => 168,
 comment        => 'Increased as unreliable',
}

Facts

Two custom facts are included.

  • certissuer returns the issuer of a grid certificate located at /etc/grid-security/hostcert.pem if it exists.

  • trustedca returns an array of all the certificate authoriry subjects located at /etc/grid-security/*.pem

Refernce

See REFERENCE.md for more details

License

Apache-2.0

Copyright

Steve Traylen, steve.traylen@cern.ch, CERN, 2016.

Contact

Steve Traylen steve.traylen@cern.ch

Support

Please log tickets and issues at http://github.com/voxpupuli/puppet-fetchcrl