Sha256: ade2c7c893a54384bdc99e566fca43f9fb68b7e754e745fd077e7ea6ef5f0a89
Contents?: true
Size: 1.14 KB
Versions: 8
Compression:
Stored size: 1.14 KB
Contents
require 'puppet/ssl/certificate_authority'
# This class wraps a given command and invokes it with a CSR name and body to
# determine if the given CSR should be autosigned
#
# @api private
class Puppet::SSL::CertificateAuthority::AutosignCommand
class CheckFailure < Puppet::Error; end
def initialize(path)
@path = path
end
# Run the autosign command with the given CSR name as an argument and the
# CSR body on stdin.
#
# @param csr [String] The CSR name to check for autosigning
# @return [true, false] If the CSR should be autosigned
def allowed?(csr)
name = csr.name
cmd = [@path, name]
output = Puppet::FileSystem::Tempfile.open('puppet-csr') do |csr_file|
csr_file.write(csr.to_s)
csr_file.flush
execute_options = {:stdinfile => csr_file.path, :combine => true, :failonfail => false}
Puppet::Util::Execution.execute(cmd, execute_options)
end
output.chomp!
Puppet.debug "Autosign command '#{@path}' exit status: #{output.exitstatus}"
Puppet.debug "Autosign command '#{@path}' output: #{output}"
case output.exitstatus
when 0
true
else
false
end
end
end
Version data entries
8 entries across 8 versions & 1 rubygems