Resource Type: x509_cert

Defined in:

lib/puppet/type/x509_cert.rb

Providers:

openssl

Overview

An x509 certificate

Properties

• ensure (defaults to: present)

  The basic property that the resource should be in.

  Supported values:

  • present
  • absent

Parameters

• ca

  The optional ca certificate filepath

• cakey

  The optional ca private key filepath

• cakey_password

  The optional CA key password

• csr

  The optional certificate signing request path

• days (defaults to: 3650)

  The validity of the certificate

  Supported values:

  • %r{\d+}
• force (defaults to: false)

  Whether to replace the certificate if the private key mismatches

  Supported values:

  • true
  • false
• password

  The optional password for the private key

• path

  The path to the certificate

• private_key

  The path to the private key

• provider

  The specific backend to use for this ‘x509_cert` resource. You will seldom need to specify this — Puppet will usually discover the appropriate provider for your platform.

• req_ext (defaults to: false)

  Whether adding v3 SAN from config

  Supported values:

  • true
  • false
  • yes
  • no
• template

  The template to use