Adds ssl::dhparams

diff --git a/manifests/dhparams.pp b/manifests/dhparams.pp
new file mode 100644 (file)
index 0000000..7b0bd2d
--- /dev/null
+++ b/manifests/dhparams.pp
@@ -0,0 +1,13 @@
+define dhparams(
+  $prefix = 'dhparams',
+  $size   = '2048',
+  $folder = '/etc/ssl/dhparams'
+)
+{
+  exec { "${name}":
+    command => "openssl dhparam -out /etc/ssl/private/${prefix}_${size}.pem ${size}",
+    user    => root,
+    group   => root,
+    creates => "${folder}/${prefix}_${size}.pem",
+  }
+}

diff --git a/manifests/init.pp b/manifests/init.pp
index 901eda9be45db71139b27a5a0c009111966bed47..414ac04ef1e50806efdb977826ac2d96151da2fe 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -1,5 +1,5 @@
 class ssl {
-  file { [ "/etc/ssl", "/etc/ssl/certs", "/etc/ssl/private" ]:
+  file { [ "/etc/ssl", "/etc/ssl/certs", "/etc/ssl/private", "/etc/ssl/dhparams" ]:
     ensure  => directory,
     owner   => "root",
     group   => "root",