Defined Type: wildfly::undertow::https

Defined in:
manifests/undertow/https.pp

Overview

Configures a connector

Parameters:

  • socket_binding (Any) (defaults to: undef)
  • keystore_path (Any) (defaults to: undef)
  • keystore_relative_to (Any) (defaults to: undef)
  • keystore_password (Any) (defaults to: undef)
  • key_alias (Any) (defaults to: undef)
  • key_password (Any) (defaults to: undef)
  • target_profile (Any) (defaults to: undef)
  • enabled_protocols (Any) (defaults to: undef)
  • enabled_cipher_suites (Any) (defaults to: undef)


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# File 'manifests/undertow/https.pp', line 4

define wildfly::undertow::https (
  $socket_binding        = undef,
  $keystore_path         = undef,
  $keystore_relative_to  = undef,
  $keystore_password     = undef,
  $key_alias             = undef,
  $key_password          = undef,
  $target_profile        = undef,
  $enabled_protocols     = undef,
  $enabled_cipher_suites = undef,
) {
  if versioncmp($wildfly::version,'9.0.0') >= 0 {
    # Wildfly 9 and higher -> we need to set enable parameter
    $listener_content = {
      'socket-binding'        => $socket_binding,
      'security-realm'        => 'TLSRealm',
      'enabled-protocols'     => $enabled_protocols,
      'enabled-cipher-suites' => $enabled_cipher_suites,
      'enabled'               => true,
    }
  } else {
    $listener_content = {
      'socket-binding'        => $socket_binding,
      'security-realm'        => 'TLSRealm',
      'enabled-protocols'     => $enabled_protocols,
      'enabled-cipher-suites' => $enabled_cipher_suites,
    }
  }

  wildfly::resource { '/core-service=management/security-realm=TLSRealm':
    content => {},
  }

  -> wildfly::resource { '/core-service=management/security-realm=TLSRealm/server-identity=ssl':
    content => {
      'keystore-path'        => $keystore_path,
      'keystore-relative-to' => $keystore_relative_to,
      'keystore-password'    => $keystore_password,
      'alias'                => $key_alias,
      'key-password'         => $key_password,
    },
  }

  -> wildfly::resource { "/subsystem=undertow/server=default-server/https-listener=${title}":
    content => $listener_content,
    profile => $target_profile,
  }
}