summaryrefslogtreecommitdiffstats
path: root/lib/puppet/indirector/key/file.rb
blob: 1990f1a469c504aef0a20e62a9a99a08d32c8ccc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
require 'puppet/indirector/ssl_file'
require 'puppet/ssl/key'

class Puppet::SSL::Key::File < Puppet::Indirector::SslFile
  desc "Manage SSL private and public keys on disk."

  store_in :privatekeydir
  store_ca_at :cakey

  # Where should we store the public key?
  def public_key_path(name)
    if ca?(name)
      Puppet[:capub]
    else
      File.join(Puppet[:publickeydir], name.to_s + ".pem")
    end
  end

  # Remove the public key, in addition to the private key
  def destroy(request)
    super

    return unless FileTest.exist?(public_key_path(request.key))

    begin
      File.unlink(public_key_path(request.key))
    rescue => detail
      raise Puppet::Error, "Could not remove #{request.key} public key: #{detail}"
    end
  end

  # Save the public key, in addition to the private key.
  def save(request)
    super

    begin
      Puppet.settings.writesub(:publickeydir, public_key_path(request.key)) { |f| f.print request.instance.content.public_key.to_pem }
    rescue => detail
      raise Puppet::Error, "Could not write #{request.key}: #{detail}"
    end
  end
end