pki
Makes puppet signed certificates available for use to other applications
Version information
released Oct 26th 2017
This version is compatible with:
Start using this module
Add this module to your Puppetfile:
mod 'thexa4-pki', '1.0.1'
Learn more about managing modules with a PuppetfileDocumentation
thexa4/pki — version 1.0.1 Oct 26th 2017
#Puppet PKI This module allows using the puppet certificates to establish trust between nodes in a network. Given that all nodes have a certificate with their hostname that is signed by the puppet master we can use the puppet master as an internal CA.
This module creates three files:
- /etc/ssl/certs/host.crt: The certificate of this node
- /etc/ssl/certs/host-ca.crt: The certificate of the puppet master that signs other certificates
- /etc/ssl/private/host.key: The key of this node.
The puppet certificates are placed in the ssl-cert group to allow applications like apache to use them.
Usage
Just include this module on the node. There are no configuration parameters.