trusted_certificate cookbook

This cookbook provides a trusted_certificate resource to manage adding SSL/TLS certificates to the operating system's trust store.

Maintainers

This cookbook is maintained by the Sous Chefs. The Sous Chefs are a community of Chef cookbook maintainers working together to maintain important cookbooks. If you’d like to know more please visit sous-chefs.org or come chat with us on the Chef Community Slack in #sous-chefs.

Requirements

Platforms

• Debian/Ubuntu
• RHEL 6+

Chef

• Chef 15.3+

Cookbooks

• none

Migration

See migration.md for the custom-resource-only migration guide.

Resources

trusted_certificate

Adds a certificate to the operating system's trust store.

properties

• content: The contents of the cert to add. This can be specfied as inline content, a URL to a remote file, or a cookbook_file included in a wrapper cookbook.
• certificate_name: The filename of the cert
• certificates_dir: The directory where certificate files are written. Defaults to the platform trust store directory.
• install_ca_certificates: Install the platform ca-certificates package before writing certificates. Defaults to true.
• sensitive: Marks managed file resources as sensitive. Defaults to true.

The resource exposes certificate_path for wrapper cookbooks that need to read the final installed .crt path.

actions

• create
• delete
• remove

example

Create certificate from inline content:

trusted_certificate 'my_corp' do
  action :create
  content 'THIS_WOULD_BE_THE_WHOLE_CERT_CONTENTS'
end

Download from a remote location:

trusted_certificate 'my_corp_remote' do
  action :create
  content 'http://www.example.com/my_corp_remote.crt'
end

Create cert from file included in a wrapper cookbook:

trusted_certificate 'my_corp_cert_wrapper' do
  action :create
  content 'cookbook_file://my_trusted_certs::my_corp_cert.crt'
end

Delete a certificate from the chain:

trusted_certificate 'my_corp' do
  action :delete
end

Contributors

This project exists thanks to all the people who contribute.

Backers

Thank you to all our backers!

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website.