class ssl {
  group { 'ssl-cert':
    ensure => present,
  }

  file { [ "/etc/ssl", "/etc/ssl/certs", "/etc/ssl/private", "/etc/ssl/dhparams" ]:
    ensure  => directory,
    owner   => "root",
    group   => "ssl-cert",
    require => Group['ssl-cert'],
  }

  file { "/usr/local/bin/ssl-cert-check":
    ensure => present,
    owner   => "root",
    group   => "root",
    mode    => 755,
    source  => "puppet://$server/modules/ssl/ssl-cert-check",
  }
}