cert

Formula to deploy certificates.

Note

See the full Salt Formulas installation and usage instructions.

Available states

• cert

cert

Deploys or removes given certificates and keys.

Example

Put certificates to /srv/salt/files/cert/ or any other cert directory under file_roots (this configuration can be changed with pillar) and list them in pillar. Private keys are deployed via pillar. See cert/pillar.example.

Available modules

• cert_formula_helper.get_filenames_matching_content

cert_formula_helper.get_filenames_matching_content

A helper function to find certificate files that match certificate contents. Useful if a certificate file gets renamed to something you don't remember and have trouble finding a certificate you wish to remove.

Example

Example that finds all certificate files in /usr/local/share/ca-certificates matching the certificate contents found in the pillar data in cert:certlist:cert.filename:cert

salt-call cert_formula_helper.get_filenames_matching_content /usr/local/share/ca-certificates  pillar_key="cert:certlist:cert.filename:cert"

Testing

For integration testing, use kitchen

# Bundler is used to ensure correct library versions
bundle exec kitchen test