manifests/dhparams.pp


1
2
3
4
5
6
7
8
9
10
11
12
13

define dhparams(
  $prefix = 'dhparams',
  $size   = '2048',
  $folder = '/etc/ssl/dhparams'
)
{
  exec { "${name}":
    command => "openssl dhparam -out /etc/ssl/private/${prefix}_${size}.pem ${size}",
    user    => root,
    group   => root,
    creates => "${folder}/${prefix}_${size}.pem",
  }
}