Purge all non-managed certificates, to get rid of the ones that come in the RPM (98a72e7b) · Commits · Projets publics / puppet-freeradius

manifests/init.pp

+18 −1

Original line number	Diff line number	Diff line
		@@ -34,7 +34,6 @@ class freeradius (
		"${freeradius::fr_basepath}/policy.d",
		"${freeradius::fr_basepath}/dictionary.d",
		"${freeradius::fr_basepath}/scripts",
		"${freeradius::fr_basepath}/certs",
		]:
		ensure => directory,
		mode => '0750',
		@@ -44,6 +43,18 @@ class freeradius (
		notify => Service[$freeradius::fr_service],
		}

		# Create cert directory separately so we can set purge option
		file { "${freeradius::fr_basepath}/certs":
		ensure => directory,
		purge => true,
		recurse => true,
		mode => '0750',
		owner => 'root',
		group => $freeradius::fr_group,
		require => [Package[$freeradius::fr_package], Group[$freeradius::fr_group]],
		notify => Service[$freeradius::fr_service],
		}

		# Set up concat policy file, as there is only one global policy
		# We also add standard header and footer
		concat { "${freeradius::fr_basepath}/policy.conf":
		@@ -203,6 +214,12 @@ class freeradius (
		require => [Package[$freeradius::fr_package], Group[$freeradius::fr_group]],
		}

		# Placeholder resource for dh and random as they are dynamically generated, so they
		# exist in the catalogue and don't get purged
		file { ["${freeradius::fr_basepath}/certs/dh", "${freeradius::fr_basepath}/certs/random"]:
		require => Exec['dh', 'random'],
		}

		# Generate global SSL parameters
		exec { 'dh':
		command => "openssl dhparam -out ${freeradius::fr_basepath}/certs/dh 1024",