Adoptable Cookbooks List

Looking for a cookbook to adopt? You can now see a list of cookbooks available for adoption!
List of Adoptable Cookbooks

Supermarket Belongs to the Community

Supermarket belongs to the community. While Chef has the responsibility to keep it running and be stewards of its functionality, what it does and how it works is driven by the community. The chef/supermarket repository will continue to be where development of the Supermarket application takes place. Come be part of shaping the direction of Supermarket by opening issues and pull requests or by joining us on the Chef Mailing List.

Select Badges

Select Supported Platforms

RSS

ssl (9) Versions 1.0.2

Sets up SSL certs and keys from an encrypted data bag

Berkshelf/Librarian
Policyfile
Knife
cookbook 'ssl', '= 1.0.2'
cookbook 'ssl', '= 1.0.2', :supermarket
knife cookbook site install ssl
knife cookbook site download ssl
README
Dependencies
Quality

= DESCRIPTION

A recipe for setting up system-wide SSL certs on Ubuntu / Debian systems.

= REQUIREMENTS

Ubuntu or Debian Linux system and an encrypted data bag named "ssl".

= ATTRIBUTES

node['ssl']['certs_dir'] = '/etc/ssl/certs' node['ssl']['keys_dir'] = '/etc/ssl/keys' node['ssl']['group'] = '/ssl-cert'

= USAGE

The certs and keys are retrieved from an encrypted data bag named "ssl". Inside the data bag, the cert should be in a key named "cert", the domain name should be in the "id" key, with periods replaced by underscores (i.e. foo.com -> foo_com), the cert's key should be in "key", and if you have a chain of certs to validate your domain's cert, put them in an array under "chain" and the recipe will set them up for you.

NOTE: The certs and keys should all be on one line, with their newlines replaced by "\n". They will stored correctly once placed on the server.

After running the default recipe, your certs will be in /etc/ssl/certs/{domain.name}.crt, and the keys will be in /etc/ssl/private/{domain.name}.key. Any chain certs will be combined into /etc/ssl/certs/{domain.name}.chain.crt and the whole cert chain will be put into /etc/ssl/certs/{domain.name}.combined.crt. The separate chain cert is for Apache, and the combined one is for Nginx.

Dependent cookbooks

This cookbook has no specified dependencies.

Contingent cookbooks

lamp_role Applicable Versions

No quality metric results found