| Class | shib2idp::idp::certificate |
| In: |
/etc/puppet/modules/shib2idp/manifests/classes/idp/certificate.pp
|
| Parent: |
This class checks the server certificates for HTTPS and install them on the Puppet agent machine. This class is also responsible to install new certificates when they are available to substitute expired ones on the IdP machine.
The files used as certificates for all the IdPs are in the files/certs directory in this module folders’ tree. Each puppet agent has a couple of certificate files available in that directory:
This class also registers a set of actions to be executed every night. These instructions check the expiration date of the certificate and if it is about to expire (less than 1 month from the current date) send an email to the address specified notifying the situation.
Parameters:
| idpfqdn: | This parameters must contain the fully qualified domain name of the IdP. This name must be the exact name used by client users to access the machine over the Internet. This FQDN, in fact, will be used to determine the CN of the certificate used for HTTPS. If the name is not identical with the server name specified by the client, the client‘s browser will raise a security exception. |
| keystorepassword: | This parameter permits to specify the keystore password used to protect the keystore file on the IdP server. |
| mailto: | The email address to be notified when the certificate used for HTTPS is about to expire. If no email address is specified, no mail warning will be sent. |
Actions:
Requires:
Sample Usage: This class file is not called directly.