Browse Source

Add support for specifying dh_param file name

master
Gilles Dartiguelongue 7 years ago
parent
commit
d2bc1e6d7c
2 changed files with 19 additions and 16 deletions
  1. +11
    -9
      nginx/ng/certificates.sls
  2. +8
    -7
      pillar.example

+ 11
- 9
nginx/ng/certificates.sls View File



{% set certificates_path = salt['pillar.get']('nginx:ng:certificates_path', '/etc/nginx/ssl') %} {% set certificates_path = salt['pillar.get']('nginx:ng:certificates_path', '/etc/nginx/ssl') %}


{% if salt.pillar.get('nginx:ng:dh_contents') %}
create_nginx_dhparam_key:
{%- for dh_param, value in salt.pillar.get('nginx:ng:dh_param').items() %}
{%- if value is string %}
create_nginx_dhparam_{{ dh_param }}_key:
file.managed: file.managed:
- name: {{ certificates_path }}/dhparam.pem
- contents_pillar: nginx:ng:dh_contents
- name: {{ certificates_path }}/{{ dh_param }}
- contents_pillar: nginx:ng:dh_param:{{ dh_param }}
- makedirs: True - makedirs: True
{% elif salt.pillar.get('nginx:ng:dh_keygen', False) %}
generate_nginx_dhparam_key:
{%- else %}
generate_nginx_dhparam_{{ dh_param }}_key:
pkg.installed: pkg.installed:
- name: {{ nginx.lookup.openssl_package }} - name: {{ nginx.lookup.openssl_package }}
file.directory: file.directory:
- name: {{ certificates_path }} - name: {{ certificates_path }}
- makedirs: True - makedirs: True
cmd.run: cmd.run:
- name: openssl dhparam -out dhparam.pem {{ salt.pillar.get('nginx:ng:dh_keysize', 2048) }}
- name: openssl dhparam -out {{ dh_param }} {{ value.get('keysize', 2048) }}
- cwd: {{ certificates_path }} - cwd: {{ certificates_path }}
- creates: {{ certificates_path }}/dhparam.pem
{% endif %}
- creates: {{ certificates_path }}/{{ dh_param }}
{%- endif %}
{%- endfor %}


{%- for domain in salt['pillar.get']('nginx:ng:certificates', {}).keys() %} {%- for domain in salt['pillar.get']('nginx:ng:certificates', {}).keys() %}



+ 8
- 7
pillar.example View File

(Your Private Key: www.example.com.key) (Your Private Key: www.example.com.key)
-----END RSA PRIVATE KEY----- -----END RSA PRIVATE KEY-----


dh_contents: |
-----BEGIN DH PARAMETERS-----
(Your custom DH prime)
-----END DH PARAMETERS-----
# or to generate one on-the-fly
dh_keygen: true
dh_keysize: 2048
dh_param:
'mydhparam1.pem': |
-----BEGIN DH PARAMETERS-----
(Your custom DH prime)
-----END DH PARAMETERS-----
# or to generate one on-the-fly
'mydhparam2.pem':
keysize: 2048


# Passenger configuration # Passenger configuration
# Default passenger configuration is provided, and will be deployed in # Default passenger configuration is provided, and will be deployed in

Loading…
Cancel
Save