From 66ae3f0130abddfbcd4226b5f0598378eb5acbc8 Mon Sep 17 00:00:00 2001
From: Elizabeth Krumbach <lyz@princessleia.com>
Date: Fri, 24 May 2013 12:43:54 -0700
Subject: [PATCH] Add ssl-cert-check to cacti server

Add monitoring of SSL certificates for openstack websites

Change-Id: I50b6a8aced7ae563381eb948ce4e8f854a6d85a9
Reviewed-on: https://review.openstack.org/30490
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
---
 manifests/init.pp | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 manifests/init.pp

diff --git a/manifests/init.pp b/manifests/init.pp
new file mode 100644
index 0000000..3cc9d32
--- /dev/null
+++ b/manifests/init.pp
@@ -0,0 +1,41 @@
+# == Class: ssl_cert_check
+#
+class ssl_cert_check(
+  $domainlist_file = '',
+  $email = '',
+  $days = ''
+) {
+  package { 'ssl-cert-check':
+    ensure => present,
+  }
+
+  file {'/var/lib/certcheck':
+    ensure  => directory,
+    owner   => 'certcheck',
+    group   => 'certcheck',
+    mode    => '0755',
+    require => User['certcheck'],
+  }
+
+  group { 'certcheck':
+    ensure => present,
+  }
+
+  user { 'certcheck':
+    ensure     => present,
+    home       => '/var/lib/certcheck',
+    shell      => '/bin/bash',
+    gid        => 'certcheck',
+    managehome => true,
+    require    => Group['certcheck'],
+  }
+
+  cron { 'check ssl certificates':
+    user    => 'certcheck',
+    command => "ssl-cert-check -a -q -f ${domainlist_file} -x ${days} -e ${email}",
+    hour    => '12',
+    minute  => '04',
+  }
+}
+
+# vim:sw=2:ts=2:expandtab:textwidth=79