Skip to content

Instantly share code, notes, and snippets.

@AlexanderS

AlexanderS/Bundler_ssl.xml

Created March 18, 2016 18:31
Show Gist options
  • Save AlexanderS/7d65d56c8f045e4366d1 to your computer and use it in GitHub Desktop.
Save AlexanderS/7d65d56c8f045e4366d1 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Bundler_ssl.xml
<Bundle xmlns:py='http://genshi.edgewall.org/'>
<Package name='ssl-cert' />
<py:for each="cert in metadata.TemplateHelper['ssl'].get_certs(metadata)">
<BoundPath type="file"
name="/etc/ssl/${cert.name}/${cert.name}.crt"
owner="root"
group="0"
mode="444"
paranoid="true">${cert.pem}</BoundPath>
<BoundPath type="file"
name="/etc/ssl/${cert.name}/${cert.name}.crt+chain"
owner="root"
group="0"
mode="444"
paranoid="true">${cert.pem}${cert.chain}</BoundPath>
<BoundPath type="file"
name="/etc/ssl/${cert.name}/${cert.name}.chain"
owner="root"
group="0"
mode="444"
paranoid="true">${cert.chain}</BoundPath>
<BoundPath type="file"
name="/etc/ssl/${cert.name}/${cert.name}.ocsp"
owner="root"
group="0"
mode="444"
paranoid="true">${cert.root}${cert.chain}</BoundPath>
<BoundPath type="file"
name="/etc/ssl/private/${cert.name}.key"
owner="root"
group="ssl-cert"
mode="440"
sensitive="true"
paranoid="true">${cert.key}</BoundPath>
<BoundPath type="file"
name="/etc/ssl/private/${cert.name}.combined.pem"
owner="root"
group="ssl-cert"
mode="440"
sensitive="true"
paranoid="true">${cert.key}${cert.pem}${cert.chain}</BoundPath>
<Path name='/etc/ssl/${cert.name}/include.nginx'
altsrc='/etc/ssl/include.nginx' />
<Path name='/etc/ssl/${cert.name}/include.apache'
altsrc='/etc/ssl/include.apache' />
</py:for>
</Bundle>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment