Merge pull request #17 from alanpearce/generate-keys

Config: Add support for generating keys
This commit is contained in:
Nitin Madhok 2014-08-24 10:46:53 -05:00
commit df61e44fea
2 changed files with 11 additions and 1 deletions

View File

@ -14,7 +14,14 @@ sshd_config:
- service: openssh
{% for keyType in ['ecdsa', 'dsa', 'rsa'] %}
{% if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
{% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %}
ssh_generate_host_{{ keyType }}_key:
cmd.run:
- name: ssh-keygen -t {{ keyType }} -N '' -f /etc/ssh/ssh_host_{{ keyType }}_key
- creates: /etc/ssh/ssh_host_{{ keyType }}_key
- user: root
{% elif salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
ssh_host_{{ keyType }}_key:
file.managed:
- name: /etc/ssh/ssh_host_{{ keyType }}_key

View File

@ -59,6 +59,9 @@ openssh:
provide_dsa_keys: False
provide_ecdsa_keys: False
provide_rsa_keys: False
generate_dsa_keys: False
generate_ecdsa_keys: False
generate_rsa_keys: False
rsa:
private_key: |
-----BEGIN RSA PRIVATE KEY-----