1 module Puppet::Parser::Functions
2 newfunction(:gen_tlsa_entry, :type => :rvalue) do |args|
3 certfile = args.shift()
4 hostname = args.shift()
7 if port.kind_of?(Array)
14 res << "; cert #{certfile} for #{hostname}:#{ports}."
16 if File.exist?(certfile)
17 cmd = ['swede', 'create', '--usage=3', '--selector=1', '--mtype=1', '--certificate', certfile, '--port', port.to_s, hostname]
18 IO.popen(cmd, "r") {|i| res << i.read }
20 res << "; certfile #{certfile} did not exist to create TLSA record for #{hostname}:#{port}."
23 cfnew = certfile.gsub(/\.crt$/, '-new.crt')
24 if cfnew != certfile and File.exist?(cfnew)
25 cmd = ['swede', 'create', '--usage=3', '--selector=1', '--mtype=1', '--certificate', cfnew, '--port', port.to_s, hostname]
27 IO.popen(cmd, "r") {|i| new_entry = i.read }
28 if not res.include?(new_entry)