Finishing the interface between the CA and the CRL.

Certificate revocation now works, the CA knows how
to generate the CRL, and the SSL::Host class knows
how to configure the CRL class for indirection.

1 files changed, 11 insertions, 0 deletions

diff --git a/lib/puppet/ssl/inventory.rb b/lib/puppet/ssl/inventory.rb
index 3b32b6d7b..38cbf46e9 100644
--- a/lib/puppet/ssl/inventory.rb
+++ b/lib/puppet/ssl/inventory.rb
@@ -38,4 +38,15 @@ class Puppet::SSL::Inventory
 
         Puppet::SSL::Certificate.search("*").each { |cert| add(cert) }
     end
+
+    # Find the serial number for a given certificate.
+    def serial(name)
+        return nil unless FileTest.exist?(@path)
+
+        File.readlines(@path).each do |line|
+            next unless line =~ /^(\S+).+\/CN=#{name}$/
+
+            return Integer($1)
+        end
+    end
 end