Class: Puppet::SSL::CertificateAuthority::AutosignCommand Private

Inherits:
Object
  • Object
show all
Defined in:
lib/puppet/ssl/certificate_authority/autosign_command.rb

Overview

This class is part of a private API. You should avoid using this class if possible, as it may be removed or be changed in the future.

This class wraps a given command and invokes it with a CSR name and body to determine if the given CSR should be autosigned

Defined Under Namespace

Classes: CheckFailure

Instance Method Summary collapse

Constructor Details

#initialize(path) ⇒ AutosignCommand

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Returns a new instance of AutosignCommand.



12
13
14
 
# File 'lib/puppet/ssl/certificate_authority/autosign_command.rb', line 12

def initialize(path)
  @path = path
end

Instance Method Details

#allowed?(csr) ⇒ true, false

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Run the autosign command with the given CSR name as an argument and the CSR body on stdin.



21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
 
# File 'lib/puppet/ssl/certificate_authority/autosign_command.rb', line 21

def allowed?(csr)
  name = csr.name
  cmd = [@path, name]

  output = Puppet::FileSystem::Uniquefile.open_tmp('puppet-csr') do |csr_file|
    csr_file.write(csr.to_s)
    csr_file.flush

    execute_options = {:stdinfile => csr_file.path, :combine => true, :failonfail => false}
    Puppet::Util::Execution.execute(cmd, execute_options)
  end

  output.chomp!

  Puppet.debug "Autosign command '#{@path}' exit status: #{output.exitstatus}"
  Puppet.debug "Autosign command '#{@path}' output: #{output}"

  case output.exitstatus
  when 0
    true
  else
    false
  end
end