diff --git a/manifests/capsule.pp b/manifests/capsule.pp index 3e4075ae..deb12ab5 100644 --- a/manifests/capsule.pp +++ b/manifests/capsule.pp @@ -24,6 +24,7 @@ class { 'certs::foreman': hostname => $capsule_fqdn } class { 'certs::foreman_proxy': hostname => $capsule_fqdn } class { 'certs::apache': hostname => $capsule_fqdn } + class { 'certs::qpid': hostname => $capsule_fqdn } class { 'certs::pulp_child': hostname => $capsule_fqdn } class { 'certs::pulp_parent': hostname => $parent_fqdn, @@ -35,6 +36,7 @@ subscribe => [Class['certs::puppet'], Class['certs::foreman'], Class['certs::foreman_proxy'], + Class['certs::qpid'], Class['certs::apache'], Class['certs::pulp_child']] } diff --git a/manifests/pulp_child.pp b/manifests/pulp_child.pp index 531dc007..0ae638a3 100644 --- a/manifests/pulp_child.pp +++ b/manifests/pulp_child.pp @@ -7,6 +7,23 @@ $ca = $::certs::default_ca ) { + cert { "${::certs::pulp_child::hostname}-qpid-client-cert": + hostname => $::certs::pulp_child::hostname, + common_name => 'pulp-qpid-client-cert', + purpose => client, + country => $::certs::country, + state => $::certs::state, + city => $::certs::city, + org => 'PULP', + org_unit => $::certs::org_unit, + expiration => $::certs::expiration, + ca => $ca, + generate => $generate, + regenerate => $regenerate, + deploy => $deploy, + password_file => $certs::ca_key_password_file, + } + if $deploy { pubkey { $pulp::consumers_ca_cert: key_pair => $ca, @@ -25,5 +42,16 @@ # Defined in certs::apache module key_pair => Cert["${hostname}-apache"], } + + Cert["${::certs::pulp_child::hostname}-qpid-client-cert"] ~> + key_bundle { $pulp::messaging_client_cert: + key_pair => Cert["${::certs::pulp_child::hostname}-qpid-client-cert"], + } ~> + file { $pulp::messaging_client_cert: + owner => 'apache', + group => 'apache', + mode => '0640', + } + } } diff --git a/manifests/qpid.pp b/manifests/qpid.pp index c01fdf62..7faa4e0a 100644 --- a/manifests/qpid.pp +++ b/manifests/qpid.pp @@ -38,6 +38,7 @@ $pfx_path = "${certs::pki_dir}/${qpid_cert_name}.pfx" $nssdb_files = ["${::certs::nss_db_dir}/cert8.db", "${::certs::nss_db_dir}/key3.db", "${::certs::nss_db_dir}/secmod.db"] + Package['httpd'] -> Package['qpid-cpp-server'] -> Cert[$qpid_cert_name] ~> pubkey { $client_cert: key_pair => Cert["${::certs::qpid::hostname}-qpid-broker"]