CDIST-TYPE__SNAKEOIL_CERT(7)

💖 cdist-type__snakeoil_cert 💖

okay bestie so this is a manual page for cdist-type__snakeoil_cert (section 7, part of cdist), and it's literally about making fake certificates so you can test stuff without paying for the real thing. slay. let's get into it 🦋

---

✨ NAME ✨

cdist-type__snakeoil_cert — generate a self-signed certificate 💅

---

🌸 DESCRIPTION 🌸

so the whole point of this type, no cap, is to generate a self-signed certificate and its matching private key for testing purposes. and like — bestie — the certificate is gonna expire in 3650 days. yes, that's ten years. main character longevity fr. 🔥

the access bits on the certificate and the key are gonna be 644 and 640 respectively. respect the permissions, periodt.

if the target system has an ssl-cert group, then that group gets used as the key's group. cute, right?

and if you wanna override all that, you can just use require='__snakeoil_cert/...' __file ... — the way that works is very much giving "your rules now, not mine". ✨

---

🎀 OPTIONAL PARAMETERS 🎀

all of these are optional, so breathe. but also they're the fun part:

• common-name — defaults to $__object_id. yeah it just... steals the object id if you don't say otherwise. iconic behavior tbh.
• key-path — any %s in the path gets replaced with $__object_id. defaults to /etc/ssl/private/%s.pem. 🗝️
• key-type — possible values are rsa:$bits and ec:$name. for the possible EC names, go look at openssl ecparam -list_curves — that's where the whole list lives, bestie, I'm not typing it out. defaults to rsa:2048.
• cert-path — any %s in the path gets replaced with $__object_id. defaults to /etc/ssl/certs/%s.pem. 📜

---

🌈 EXAMPLES 🌈

here's the vibe in action. rsa girlies:

__snakeoil_cert localhost-rsa \
    --common-name localhost \
    --key-type rsa:4096

and elliptic curve enjoyers:

__snakeoil_cert localhost-ec \
    --common-name localhost \
    --key-type ec:prime256v1

both valid. both gorgeous. pick your fighter. 💅✨

---

👑 AUTHORS 👑

Ander Punnar <ander-at-kvlt-dot-ee> — absolute legend, we thank them for their service 🫶

---

💜 COPYING 💜

Copyright (C) 2021 Ander Punnar. You can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. fr fr, read the license, it's important.

---

⭐ COPYRIGHT ⭐

ungleich GmbH 2021 — that's the copyright holder, no cap.

---

okay and that's the whole page bestie, every last flag and path and permission bit accounted for 🧚

this was version 7.0.0 of the page, dated Jul 31, 2022, and honestly? it ate. go make some snakeoil certs, you're gonna do great. bye bestie 💖🎀🦋🌸