source => "puppet:///modules/entropykey/ekeyd.conf",
notify => Exec['restart_ekeyd'],
require => [ Package['ekeyd'] ],
- ;
+ ;
+ # our CRL expires after a while (2 or 4 weeks?), so we have
+ # to restart stunnel so it loads the new CRL.
+ "/etc/cron.weekly/stunnel-ekey-restart":
+ content => "#!/bin/sh\n# This file is under puppet control\nenv -i /etc/init.d/stunnel4 restart puppet-ekeyd > /dev/null\n",
+ mode => "555",
+ ;
}
exec {