package "openssl"
package "ssl-cert"
-cookbook_file "/etc/ssl/certs/rapidssl.pem" do
- owner "root"
- group "root"
- mode 0444
- backup false
+%w(rapidssl startcom dhparam).each do |certificate|
+ cookbook_file "/etc/ssl/certs/#{certificate}.pem" do
+ owner "root"
+ group "root"
+ mode 0o444
+ backup false
+ end
end
-[ "openstreetmap", "tile.openstreetmap" ].each do |certificate|
+["openstreetmap", "tile.openstreetmap", "osmfoundation"].each do |certificate|
if node[:ssl][:certificates].include?(certificate)
cookbook_file "/etc/ssl/certs/#{certificate}.pem" do
owner "root"
group "root"
- mode 0444
+ mode 0o444
backup false
end
file "/etc/ssl/private/#{certificate}.key" do
owner "root"
group "ssl-cert"
- mode 0440
+ mode 0o440
content keys[certificate].join("\n")
backup false
end