saltstack-formulas/openssh-formula
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #17 from alanpearce/generate-keys

Browse Source 
Config: Add support for generating keys
This commit is contained in:
Nitin Madhok 2014-08-24 10:46:53 -05:00
commit df61e44fea
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
openssh/config.sls
View File

@ -14,7 +14,14 @@ sshd_config:
- service: openssh - service: openssh
{% for keyType in ['ecdsa', 'dsa', 'rsa'] %} {% for keyType in ['ecdsa', 'dsa', 'rsa'] %}
{% if salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %} {% if salt['pillar.get']('openssh:generate_' ~ keyType ~ '_keys', False) %}
ssh_generate_host_{{ keyType }}_key:
cmd.run:
- name: ssh-keygen -t {{ keyType }} -N '' -f /etc/ssh/ssh_host_{{ keyType }}_key
- creates: /etc/ssh/ssh_host_{{ keyType }}_key
- user: root
{% elif salt['pillar.get']('openssh:provide_' ~ keyType ~ '_keys', False) %}
ssh_host_{{ keyType }}_key: ssh_host_{{ keyType }}_key:
file.managed: file.managed:
- name: /etc/ssh/ssh_host_{{ keyType }}_key - name: /etc/ssh/ssh_host_{{ keyType }}_key

3
pillar.example
View File

@ -59,6 +59,9 @@ openssh:
provide_dsa_keys: False provide_dsa_keys: False
provide_ecdsa_keys: False provide_ecdsa_keys: False
provide_rsa_keys: False provide_rsa_keys: False
generate_dsa_keys: False
generate_ecdsa_keys: False
generate_rsa_keys: False
rsa: rsa:
private_key: | private_key: |
-----BEGIN RSA PRIVATE KEY----- -----BEGIN RSA PRIVATE KEY-----