aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-08-23 14:02:14 -0300
committerSilvio Rhatto <rhatto@riseup.net>2014-08-23 14:02:14 -0300
commitde41002518011b9fbc69d85db791db46cfcc44b2 (patch)
tree2292ab98c222db3f68552a5d83a585e21bb28453
parentaa1883fd7edebdd834abdca99c86c35a48b31d1c (diff)
downloadpuppet-sshd-de41002518011b9fbc69d85db791db46cfcc44b2.tar.gz
puppet-sshd-de41002518011b9fbc69d85db791db46cfcc44b2.tar.bz2
Exporting ECDSA host key
-rw-r--r--manifests/base.pp19
1 files changed, 17 insertions, 2 deletions
diff --git a/manifests/base.pp b/manifests/base.pp
index 4001985..bb46f05 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -13,21 +13,36 @@ class sshd::base {
case $::sshrsakey {
'': { info("no sshrsakey on ${::fqdn}") }
default: {
- @@sshkey{$::fqdn:
+ @@sshkey{ "${::fqdn}-rsa":
tag => "fqdn",
type => ssh-rsa,
key => $::sshrsakey,
ensure => present,
}
+
+ @@sshkey{ "${::fqdn}-ecdsa":
+ tag => "fqdn",
+ type => ecdsa-sha2-nistp256,
+ key => $::sshecdsakey,
+ ensure => present,
+ }
+
# In case the node has uses a shared network address,
# we don't define a sshkey resource using an IP address
if $sshd::shared_ip == "no" {
- @@sshkey{$::ipaddress:
+ @@sshkey{ "${::ipaddress}-rsa":
tag => "ipaddress",
type => ssh-rsa,
key => $::sshrsakey,
ensure => present,
}
+
+ @@sshkey{ "${::ipaddress}-ecdsa":
+ tag => "ipaddress",
+ type => ecdsa-sha2-nistp256,
+ key => $::sshecdsakey,
+ ensure => present,
+ }
}
}
}