{"id":15048374,"url":"https://github.com/github/puppet-ca_cert","last_synced_at":"2025-10-04T08:31:35.215Z","repository":{"id":65974886,"uuid":"82854234","full_name":"github/puppet-ca_cert","owner":"github","description":"A puppet module for managing (non-system) CA certificates.","archived":true,"fork":true,"pushed_at":"2017-02-24T05:07:43.000Z","size":67,"stargazers_count":7,"open_issues_count":0,"forks_count":8,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-09-25T21:11:08.174Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"voxpupuli/puppet-ca_cert","license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/github.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-02-22T21:27:07.000Z","updated_at":"2024-07-31T03:20:11.000Z","dependencies_parsed_at":"2023-02-19T18:01:02.870Z","dependency_job_id":null,"html_url":"https://github.com/github/puppet-ca_cert","commit_stats":null,"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/github%2Fpuppet-ca_cert","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/github%2Fpuppet-ca_cert/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/github%2Fpuppet-ca_cert/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/github%2Fpuppet-ca_cert/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/github","download_url":"https://codeload.github.com/github/puppet-ca_cert/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219876581,"owners_count":16554769,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-24T21:11:11.689Z","updated_at":"2025-10-04T08:31:29.911Z","avatar_url":"https://github.com/github.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"ca_cert\n=======\n\n[![Build Status](https://travis-ci.org/pcfens/puppet-ca_cert.png?branch=master)](https://travis-ci.org/pcfens/puppet-ca_cert)\n\nOverview\n--------\n\nThe ca_cert module tries to provide a simple way to manage Certificate Authority (CA)\ncertificates on a Linux system. (Patches are welcome to help support other\noperating sytems)\n\nUsage\n-----\n\nAfter the `ca_cert` module has been declared add CA certificates with the ca_cert::ca\ndefinition.\n\n### ca_cert\n\n`ca_cert` ensures that the locations and tools needed to manage the CAs are present on\nyour system.\n\nOptional parameters:\n  * `always_update_certs`: Run your system's update CA command even when there are no\n                           updates needed. (defaults to false)\n  * `purge_unmanaged_CAs`: Purge non-OS default CAs from the system. This will only\n                           remove CAs that might be installed using your OS's default\n                           management method. (defaults to false)\n  * `install_package`: Whether or not this module should install the ca_certificates\n                       package. The package contains the default trusted (typically\n                       Mozilla) CA certificates, as well as the tools required for this\n                       module to manage other installed CA certificates. (defaults to true)\n  * `ca_certs`: A hash of certificates you would like added. These may also be defined\n                by declaring `ca_cert::ca` once for each certificate.\n\n### ca_cert::ca\n\nCAs can be added as URLs, text, or a puppet managed file\n\n```puppet\nca_cert::ca { 'GlobalSign-OrgSSL-Intermediate':\n  ensure =\u003e 'trusted',\n  source =\u003e 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt',\n}\n```\n\n```puppet\nca_cert::ca { 'GlobalSign-OrgSSL-Intermediate':\n  ensure =\u003e 'trusted',\n  source =\u003e 'puppet:///modules/profiles/CAs/InCommon.crt',\n}\n```\n\n\n`ca_cert::ca`:\n\n  * `ca_text`: The text of the CA certificate to install. Required if text is the source\n               (default). If a different source is specified this parameter is ignored.\n  * `source`: Where the CA certificate should be retrieved from. text, http, https, ftp,\n              file, and puppet protocols/sources are supported. If text, then the ca_text parameter\n              is also required. Defaults to text.\n\n              **Warning**: certificates delivered via http, https, or ftp won't be\n              updated if the upstream source changes.\n\n              **SLES 11 Specific Detail**: Cert File must be in `.pem` format\n\n  * `ensure`: Whether or not the CA certificate should be on the system or not. Valid\n              values are trusted, present, distrusted, and absent. Trusted is the same\n              as present. On Debian systems untrusted is the same as absent. On RedHat\n              based systems untrusted certificates are placed in a different path before\n              calling the update command. (defaults to trusted)\n  * `verify_https_cert`: If a certificate is retrieved over HTTPS, whether or not the\n                         server's certificate should be validated against the fetching\n                         machine's trusted CA list or not. (defaults to true)\n\nSupported Platforms\n-------------------\n\nThis module has been tested on Ubuntu 14.04, Ubuntu 12.04, CentOS 6, SLES 11, SLES 12, OpenSuSE 13.1, OpenSuSE 13.2 and OpenSuSE 42.1 Leap.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgithub%2Fpuppet-ca_cert","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgithub%2Fpuppet-ca_cert","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgithub%2Fpuppet-ca_cert/lists"}