The rehan-easyrsa
module for installing, managing and generating SSL certificates using OpenVPN's PKI toolkit - Easy-RSA.
A puppet module for managing the installation and configuration of OpenVPN's PKI toolkit. This module installs and configures Easy-RSA utility from its Github Repository.
Easy-RSA packages normally available from OS repositories are outdated and based on the old 2.x version of Easy-RSA. This module clones Easy-RSA from the repository at:
- Clones Easy-RSA repository to /opt/easyrsa-git and creates links under /opt/easyrsa
- Allow separation of CA from Server and Client certificates.
In order to install rehan-easyrsa
, run the following command:
$ puppet module install rehan-easyrsa
The module does expect all the data to be provided through 'Hiera'. See Usage for examples on how to configure it.
This module is designed to be as clean and compliant with latest puppet code guidelines.
A basic install with the defaults would be:
include easyrsa
You can submit pull requests and create issues through the official page of this module: https://github.com/rehan/puppet-easyrsa. Please do report any bug and suggest new features/improvements.