Refresh apache on cert updates

[mirror/dsa-puppet.git] / modules / ssl / manifests / init.pp

diff --git a/modules/ssl/manifests/init.pp b/modules/ssl/manifests/init.pp
index fac2e15..3d37fb8 100644 (file)
--- a/modules/ssl/manifests/init.pp
+++ b/modules/ssl/manifests/init.pp
@@ -29,6 +29,7 @@ class ssl {
                ensure => directory,
                group  => ssl-cert,
                mode   => '0750',
+               require => Package['ssl-cert'],
        }
        file { '/etc/ssl/debian/certs/thishost.crt':
                source => "puppet:///modules/ssl/clientcerts/${::fqdn}.client.crt",
@@ -36,7 +37,9 @@ class ssl {
        }
        file { '/etc/ssl/debian/keys/thishost.key':
                source => "puppet:///modules/ssl/clientcerts/${::fqdn}.key",
-               mode   => '0440'
+               mode   => '0440',
+               group   => ssl-cert,
+               require => Package['ssl-cert'],
        }
        file { '/etc/ssl/debian/certs/ca.crt':
                source => 'puppet:///modules/ssl/clientcerts/ca.crt',
@@ -52,8 +55,9 @@ class ssl {
        }
        file { '/etc/ssl/debian/keys/thishost-server.key':
                source  => "puppet:///modules/exim/certs/${::fqdn}.key",
-               group   => ssl-cert,
                mode    => '0440',
+               group   => ssl-cert,
+               require => Package['ssl-cert'],
        }
 
        exec { 'c_rehash /etc/ssl/debian/certs':