Add support for ssl certificates

jhoblitt · Mar 1, 2016 · ebb3e32 · ebb3e32
1 parent 7e67d3a
commit ebb3e32
Showing 1 changed file with 21 additions and 0 deletions.
diff --git a/manifests/init.pp b/manifests/init.pp
@@ -62,6 +62,7 @@
   $config_pgsql = {},
   $extauth_enabled = false,
   $extauth_handler = '',
+  $ssl_certificates = '',
 ) {
   validate_bool($use_selinux)
   validate_hash($config)
@@ -70,6 +71,7 @@
   validate_hash($config_pgsql)
   validate_bool($extauth_enabled)
   validate_string($extauth_handler)
+  validate_string($ssl_certificates)
 
   include pureftpd::service
 
@@ -149,6 +151,25 @@
 
   create_resources( 'class', { 'pureftpd::config' => $safe_config } )
 
+  if $ssl_certificates != '' {
+    if $ssl_certificates =~ /^puppet:\/\// {
+      file {'/etc/pki/pure-ftpd/pure-ftpd.pem':
+        ensure => present,
+        owner  => 'root',
+        group  => 'root',
+        mode   => '0400',
+        source => $ssl_certificates,
+        notify => Class[ 'pureftpd::service' ]
+      }
+    } else {
+      file {'/etc/pki/pure-ftpd/pure-ftpd.pem':
+        ensure => link,
+        target => $ssl_certificates,
+        notify => Class[ 'pureftpd::service' ]
+      }
+    }
+  }
+
   Class[ 'pureftpd::install' ] ->
   Class[ 'pureftpd::config' ] ->
   Class[ 'pureftpd::service' ] ->