Contents

# create the CA
class Vault::Provision::Pki::Intermediate::Generate::Internal < Vault::Provision::Prototype
  include Vault::Provision::Pki

  def gen_file mount_point
    "#{@instance_dir}/#{mount_point}/intermediate/generate/internal.json"
  end

  def repo_files
    mounts = @vault.sys.mounts
    generators = mounts.keys.select do |mp|
      mounts[mp].type == 'pki' && FileTest.file?(gen_file(mp))
    end
    generators.map { |mp| gen_file(mp) }
  end

  def provision!
    repo_files.each do |rf|
      mount_point = rf.split('/')[-4]
      next if generated? mount_point
      next unless @pki_allow_destructive
      resp = @vault.post "v1/#{mount_point}/intermediate/generate/internal",
                         File.read(rf)
      sign_intermediate_csr(mount_point, resp[:data][:csr])
    end
  end

  def sign_intermediate_csr mount_point, csr
    return if @intermediate_issuer.empty?
    root_mount = @intermediate_issuer[mount_point.to_sym]
    return if root_mount.nil?

    req = JSON.parse(File.read(gen_file(mount_point)))
    resp = @vault.post "v1/#{root_mount}/root/sign-intermediate",
                       JSON.dump(csr:                  csr,
                                 common_name:          req['common_name'],
                                 ttl:                  req['ttl'],
                                 max_path_length:      0,
                                 exclude_cn_from_sans: true)

    @vault.post "v1/#{mount_point}/intermediate/set-signed",
                JSON.dump(certificate: resp[:data][:certificate])
  end
end

Version data entries

6 entries across 6 versions & 1 rubygems

Version	Path
vault-provision-0.1.7	lib/vault/provision/pki/intermediate/generate/internal.rb
vault-provision-0.1.6	lib/vault/provision/pki/intermediate/generate/internal.rb
vault-provision-0.1.5	lib/vault/provision/pki/intermediate/generate/internal.rb
vault-provision-0.1.4	lib/vault/provision/pki/intermediate/generate/internal.rb
vault-provision-0.1.2	lib/vault/provision/pki/intermediate/generate/internal.rb
vault-provision-0.1.1	lib/vault/provision/pki/intermediate/generate/internal.rb