+ file { '/etc/ssl/debian/certs/thishost-server.crt':
+ source => "puppet:///modules/exim/certs/${::fqdn}.crt",
+ notify => Exec['c_rehash /etc/ssl/debian/certs'],
+ }
+ file { '/etc/ssl/debian/keys/thishost-server.key':
+ source => "puppet:///modules/exim/certs/${::fqdn}.key",
+ mode => '0440',
+ group => ssl-cert,
+ require => Package['ssl-cert'],
+ }
+
+ exec { 'make_new_service_links':
+ command => 'cp -f --symbolic-link ../servicecerts/* .',
+ cwd => '/etc/ssl/certs',
+ refreshonly => true,
+ notify => Exec['cleanup_dead_links']
+ }
+
+ exec { 'cleanup_dead_links':
+ command => 'find -L /etc/ssl/certs -mindepth 1 -maxdepth 1 -type l -delete',
+ refreshonly => true,
+ notify => Exec['c_rehash /etc/ssl/certs']
+ }
+
+ exec { 'c_rehash /etc/ssl/certs':
+ refreshonly => true,
+ }
+