Class: Berkshelf::SSLPolicy
- Inherits:
-
Object
- Object
- Berkshelf::SSLPolicy
- Defined in:
- lib/berkshelf/ssl_policies.rb
Instance Attribute Summary collapse
-
#store ⇒ Store
readonly
Holds trusted CA certificates used to verify peer certificates.
Instance Method Summary collapse
- #add_trusted_cert(cert) ⇒ Object
-
#initialize ⇒ SSLPolicy
constructor
A new instance of SSLPolicy.
- #set_custom_certs ⇒ Object
- #trusted_certs_dir ⇒ Object
Constructor Details
Instance Attribute Details
#store ⇒ Store (readonly)
Returns Holds trusted CA certificates used to verify peer certificates.
8 9 10 |
# File 'lib/berkshelf/ssl_policies.rb', line 8 def store @store end |
Instance Method Details
#add_trusted_cert(cert) ⇒ Object
18 19 20 21 22 |
# File 'lib/berkshelf/ssl_policies.rb', line 18 def add_trusted_cert(cert) @store.add_cert(cert) rescue OpenSSL::X509::StoreError => e raise e unless e. == "cert already in hash table" end |
#set_custom_certs ⇒ Object
33 34 35 36 37 38 |
# File 'lib/berkshelf/ssl_policies.rb', line 33 def set_custom_certs ::Dir.glob("#{trusted_certs_dir}/" "{*.crt,*.pem}").each do |cert| cert = OpenSSL::X509::Certificate.new(IO.read(cert)) add_trusted_cert(cert) end end |
#trusted_certs_dir ⇒ Object
24 25 26 27 28 29 30 31 |
# File 'lib/berkshelf/ssl_policies.rb', line 24 def trusted_certs_dir config_dir = Berkshelf.config.chef.trusted_certs_dir.to_s if config_dir.empty? || !::File.exist?(config_dir) File.join(ENV["HOME"], ".chef", "trusted_certs") else config_dir end end |