-
-
Notifications
You must be signed in to change notification settings - Fork 176
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support for cacert_file param on archive resource #422
Support for cacert_file param on archive resource #422
Conversation
This adds a cacert_file parameter to the archive type and support for this option in curl, wget and ruby provider. The option could be used to specify a custom CA bundle for certificate verification in the TLS handshake.
Remove empty line.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good to me, but I'm far away from being an expert for archive. Somebody else should review this as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Fix validation logic for cacert_file. Co-authored-by: Ewoud Kohl van Wijngaarden <[email protected]>
Simplified path to windows ca file. Co-authored-by: Ewoud Kohl van Wijngaarden <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Regarding the type validation i copied that over from the other path options. Maybe you change all the options to use puppet type validations.
@alexjfisher any last comments? |
If you can confirm that it will not take a half year to review it and then will be reverted again. |
Pull Request (PR) description
This adds a cacert_file parameter to the archive type and
support for this option in curl, wget and ruby provider.
The option could be used to specify a custom CA bundle for
certificate verification in the TLS handshake.
This Pull Request (PR) fixes the following issues
related #400
implements #188
Additional notes
I'm unsure about the part in lib/puppet_x/bodeco/util.rb with ENV['SSL_CERT_FILE'].
Where is it used? Is it still required?