I see intructions on how to generate (using rake) an ssl_cert and use it on
a per cookbook level. Is there a way to force each client to use the
keypair for everything without having to deal with it in each cookbook?
What is the best practice for using ssl certs?
Thanks!
–
Matt Matson
m2matson@gmail.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hello!
On Nov 16, 2010, at 11:23 AM, Matt Matson wrote:
I see intructions on how to generate (using rake) an ssl_cert and use it on a per cookbook level. Is there a way to force each client to use the keypair for everything without having to deal with it in each cookbook? What is the best practice for using ssl certs?
The general idea with that rake task is that when you need a self-signed SSL certificate (such as for internal servers or testing), you generate the appropriately named certificate, then copy the files from the certificates directory into the cookbook "files/default" directory of the cookbook where it is needed. Then write in the recipe a cookbook_file resource that uses the certificate generated.
Opscode, Inc
Joshua Timberman, Technical Evangelist
IRC, Skype, Twitter, Github: jtimberman
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (Darwin)
iEYEARECAAYFAkzi+14ACgkQO97WSdVpzT0kpwCfXAVeQAKjyXw5mrxk+OzNPJlx
ShMAnRnSWgKeyf4mEtg97J04GZwQeiy9
=GMRQ
-----END PGP SIGNATURE-----