source => "puppet:///modules/entropykey/ekeyd.conf",
notify => Exec['restart_ekeyd'],
require => [ Package['ekeyd'] ],
+ ;
+ # our CRL expires after a while (2 or 4 weeks?), so we have
+ # to restart stunnel so it loads the new CRL.
+ "/etc/cron.weekly/stunnel-ekey.conf":
+ content => "# This file is under puppet control\nenv -i /etc/init.d/stunnel4 restart puppet-ekeyd\n",
+ mode => "555",
+ ;
;
}