Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

Select Status

RSS

certificate (33) Versions 3.0.0

Installs and configures certificates, private keys, CA root bundles from encrypted data bags.

Policyfile
Berkshelf
Knife
cookbook 'certificate', '~> 3.0.0', :supermarket
cookbook 'certificate', '~> 3.0.0'
knife supermarket install certificate
knife supermarket download certificate
README
Dependencies
Changelog
Quality 50%

Certificate Cookbook

Cookbook Version
CI State
OpenCollective
OpenCollective
License

Description

This cookbook automates the management of X.509 certificates, private keys, and CA root bundles. It provides a powerful and flexible certificate_manage resource to fetch data from Chef Data Bags (encrypted or unencrypted) or direct plaintext input.

Requirements

  • Chef Infra Client: >= 15.3 (Required for unified_mode)

Resources

[certificate_manage](documentation/certificate_manage.md)

The primary resource for managing certificate files on disk.

certificate_manage 'my_site' do
  data_bag 'my_certs'
  data_bag_type 'encrypted'
  owner 'www-data'
  group 'www-data'
end

See the [resource documentation](documentation/certificate_manage.md) for full details and examples!

Usage

This cookbook is designed to be used as a dependency in your own cookbooks. Add depends 'certificate' to your metadata.rb and use the certificate_manage resource.

Contributors

This project exists thanks to all the people who contribute.

Backers

Thank you to all our backers!

https://opencollective.com/sous-chefs#backers

Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website.

https://opencollective.com/sous-chefs/sponsor/0/website

Dependent cookbooks

This cookbook has no specified dependencies.

Contingent cookbooks

There are no cookbooks that are contingent upon this one.

certificate Cookbook CHANGELOG

This file is used to list changes made in each version of the certificate cookbook.

3.0.0 (2026-04-13)

⚠ BREAKING CHANGES

  • Removed recipe-based interface (default, manage_by_attributes, wildcard).

Features

  • ci: migrate to reusable workflows v4.1.0 (#112) (ee8de29)
  • full migration to custom resource pattern (#123) (3f2ba37)
  • major version bump for custom resource migration (4fdf5d6)

Bug Fixes

  • ci: Update workflows to use release pipeline (#113) (f4488e7)

Reverts

2.1.5 (2025-10-15)

Bug Fixes

  • ci: Update workflows to use release pipeline (#113) (f4488e7)

Reverts

2.1.3 - 2024-11-18

Standardise files with files in sous-chefs/repo-management

2.1.2 - 2024-07-15

Standardise files with files in sous-chefs/repo-management

2.1.1 - 2024-05-23

Standardise files with files in sous-chefs/repo-management

2.1.0 - 2024-05-03

  • Allow owner and group to be String or Integer

2.0.16 - 2023-04-19

  • Various CI and Documentation cleanup

2.0.15 - 2023-04-07

  • Standardise files with files in sous-chefs/repo-management

2.0.14 - 2023-04-01

  • Update gaurav-nelson/github-action-markdown-link-check action to v1.0.15

2.0.13 - 2023-04-01

  • Update actions/stale action to v8

2.0.12 - 2023-04-01

  • Standardise files with files in sous-chefs/repo-management

2.0.11 - 2023-03-15

  • Standardise files with files in sous-chefs/repo-management

2.0.10 - 2023-03-02

  • Standardise files with files in sous-chefs/repo-management

2.0.9 - 2023-02-23

  • Standardise files with files in sous-chefs/repo-management

2.0.8 - 2023-02-16

  • Standardise files with files in sous-chefs/repo-management

2.0.7 - 2023-02-15

  • Standardise files with files in sous-chefs/repo-management

2.0.6 - 2023-02-14

  • Remove CircleCI

2.0.5 - 2022-12-13

  • Standardise files with files in sous-chefs/repo-management

2.0.4 - 2022-02-03

  • Standardise files with files in sous-chefs/repo-management

2.0.3 - 2022-02-02

  • Fix cert_path usage when using create_subfolders
  • Remove delivery and move to calling RSpec directly via a reusable workflow
  • Update tested platforms

2.0.2 - 2021-08-30

  • Standardise files with files in sous-chefs/repo-management

2.0.1 - 2021-07-09

  • Standardise files with files in sous-chefs/repo-management

2.0.0 - 2021-07-06

  • Sous Chefs Adoption

1.0.0 - 2015-04-03

  • #45 @dmlb2000 added data_bag_type parameter and support for vault, or unencrypted modes.
  • Update documentation for helper methods.

0.8.2 - 2015-03-02

  • #43 @hartfordfi## e added sensitive mode to hide certificates and keys in console output.
  • #47 @fletchowns added documentation note concerning lazy attribute evaluation.

0.8.1 - 2015-02-05

  • Fix bad pick on merge conflict from revert.

0.8.0 - 2015-02-04

  • Revert #38: This previous change worked around a bug in Knife that limited use of characters in data bags. See CHEF-3531 for more information.

0.7.0 - 2015-01-23

  • #33 expose final path of managed objects.
  • #38 normalize dots to underscore in search_id
  • #40 chefspec matcher deprecation
  • Update travis config

v0.6.3

  • #30 Hash rockets
  • #34 Rescue version

v0.6.0

  • Add thor-scmversion
  • Add use_inline_resources, if defined
  • Add ignore_missing parameter

v0.5.2

  • Update documentation
  • Update gitignore
  • Rubocop whitespace corrections

v0.5.0

  • ChefSpec create_certificate_manage matcher added.
  • Added combined_file resource.
  • Update build files.
  • Added Rubocop.
  • Added BATS tests.

v0.4.3

  • Issue #16, fix handling of subdir creation

v0.4.2

  • Issue #15, Revert FC017 change

v0.4.1

  • FC017: LWRP does not notify when updated: ./providers/manage.rb:24

v0.4.0

  • Add nginx_cert knob for chained certificates

v0.3.0

  • Add test-kitchen coverage and documentation.

v0.2.3

  • Fix typo in "manage" resource definitions

v0.2.2

  • Add :create_subfolders attribute, to toggle off folder creation of private/certs directories.

v0.2.1

  • Fixes issue #11, reported by @tmatilia

v0.2.0

Cleaning up the backlog of PRs

  • @kechagia added data_bag_secret attribute
  • @sawanoboly added smartos paths, and recipe certificate::manage_by_attributes
  • allow specification of data bag secret
    • new attribute added: data_bag_secret
    • defaults to /etc/chef/encrypted_data_bag_secret
  • openssl certs path for smartos
  • add recipe manage_by_attributes
  • Add :data_bag_keyfile attribute to the LWRP.

v0.1.0

Thanks Teemu, and Kris, for their outstanding work!

  • Teemu Matilainen

    • Add whyrun mode support.
    • Extract directory and file creation to generic methods.
    • Corrected outstanding issues related to updated_by_last_action
  • Kris Kechagia

    • Corrected the updated_by_last_action to avoid unneccessary notification.

0.0.6

  • Fix incorrect has_key conditional
  • Disable incorrect foodcritic warning about repetition

0.0.5

  • Add foodcritic linting
  • Anyone have ideas on testing LWRPs?

0.0.4

  • Fix default action

0.0.3

  • Minor typo fixes

0.0.2

  • LWRP conversion of recipe

0.0.1

  • Recipe prototype

Collaborator Number Metric
            

3.0.0 passed this metric

Contributing File Metric
            

3.0.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a CONTRIBUTING.md file

Cookstyle Metric
            

3.0.0 passed this metric

No Binaries Metric
            

3.0.0 passed this metric

Testing File Metric
            

3.0.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must contain a TESTING.md file

Version Tag Metric
            

3.0.0 failed this metric

Failure: To pass this metric, your cookbook metadata must include a source url, the source url must be in the form of https://github.com/user/repo, and your repo must include a tag that matches this cookbook version number

Copyright © 2026 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.

Progress and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries.
See Trademarksfor appropriate markings. All rights in any other trademarks contained herein are reserved by their respective owners and their inclusion does not imply an endorsement, affiliation, or sponsorship as between Progress and the respective owners.

Code of Conduct Terms and Conditions of Use Privacy Policy Cookie Policy Trademark Policy Status