summaryrefslogtreecommitdiffstats
path: root/lib/puppet/ssl/key.rb
Commit message (Collapse)AuthorAgeFilesLines
* Certificates now work over REST.Luke Kanies2008-08-071-1/+1
| | | | | | | | | All of the format work is done, they all support plaintext successfully, and I've got integration tests that demonstrate that it actually works. Signed-off-by: Luke Kanies <luke@madstop.com>
* Making all certificates only support the plaintext format.Luke Kanies2008-08-041-0/+6
| | | | | | | None of them actually support yaml or marshal by default, and plaintext is easiest anyway. Signed-off-by: Luke Kanies <luke@madstop.com>
* Moving the password file handling into the SSL::Key class.Luke Kanies2008-04-171-8/+12
| | | | | | | | | | | | | | This was necessary because when the Indirector is used, there isn't necessarily enough context available to know when a password file should be used (e.g., when reading a Key from disk, you don't know if that key was encrypted). Now, the Key class automatically uses the right password file, and only tries to use those files that actually exist. This isn't very flexible, in that it only allows one CA file and one non-CA file, but no one really uses anything but the CA file anyway.
* Adding SSL::Host-level support for managing the terminus andLuke Kanies2008-04-171-1/+1
| | | | | cache classes. Also, defaulting to the :file terminus for all of the SSL classes.
* Making the first pass at using requests instead ofLuke Kanies2008-04-151-1/+1
| | | | | specifying the terminus class. The individual ssl classes now work, but the ssl host class doesn't yet.
* We have a basically functional CA -- it can signLuke Kanies2008-04-151-5/+9
| | | | | | requests and return certificates. There's still plenty more work to do, but I'm probably not much more than a day away from redoing puppetca to use this code.
* The certificate authority is now functional and tested.Luke Kanies2008-04-151-8/+19
|
* This is a first pass at the certificate authority.Luke Kanies2008-04-151-0/+15
| | | | | The tests are basically entirely absent still, but the structure is all there.
* Adding he last of the indirection classes for the sslLuke Kanies2008-04-151-1/+1
| | | | classes, finally including the certificate requests.
* The basics for the certificate and certificate requestLuke Kanies2008-04-151-9/+4
| | | | | indirection terminii are done. I need to move most of the test code to a shared behaviour now.
* The new SSL classes basically work, but they're notLuke Kanies2008-04-151-1/+1
| | | | functionally connected to any kind of indirection.
* First stage of cert refactoring: PrivateLuke Kanies2008-04-151-0/+21
keys kind of work.