Skip to content

Commit

Permalink
Fixes #9699: Check for nssdb creation before running certutil.
Browse files Browse the repository at this point in the history
Switches to checking for the nssb execute that creates the actual
database instead of just the directory that contains them. This
prevents the following error on EL6:

  certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The
  certificate/key database is in an unsupported format.
  • Loading branch information
ehelms committed Mar 10, 2015
1 parent c7ce6c2 commit ffd3db1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion manifests/ssltools/certutil.pp
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# type to append cert to nssdb
define certs::ssltools::certutil($nss_db_dir, $client_cert, $cert_name=$title, $refreshonly = true) {
File[$nss_db_dir] ->
Exec['create-nss-db'] ->
exec { "delete ${cert_name}":
path => ['/bin', '/usr/bin'],
command => "certutil -D -d ${nss_db_dir} -n '${cert_name}'",
Expand Down

0 comments on commit ffd3db1

Please sign in to comment.