puppetlabs / puppetlabs/puppetlabs-java_ks
Chain certificate not imported in the truststore
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 34
- Forks
- 97
- Avg merge
- 1h 22m
- Merged PRs (30d)
- 1
Description
Describe the Bug
Consider
java_ks { "$cert_alias:$truststore_path":
certificate => $cert_path_unique,
chain => $chain_path_unique,
trustcacerts => true,
password => $truststore_passwd
}
According to the documentation, I thought it would upgrade the keystore with the chain but it's not.
Same thing with the certificate params if $cert_path_unique contains the intermediate and the leaf.
Expected Behavior
The keystore should contain the certificate and the intermediate.
Environment
- Version [5.1.1]
- Platform [puppet 8 rhel 9]
Am I missing something ?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the chain and certificate parameter descriptions in REFERENCE.md and reproduce the example on Puppet 8 with version 5.1.1 on RHEL 9. Trace how the module invokes keytool and openssl for these parameters, then verify that the resulting truststore contains both the leaf certificate and its intermediate.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, ruby
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 55/100