Adds SSL/TLS support

[integration/packaging/puppet-opendaylight.git] / templates / aaa-cert-config.xml.erb

diff --git a/templates/aaa-cert-config.xml.erb b/templates/aaa-cert-config.xml.erb
new file mode 100644 (file)
index 0000000..d6faa89
--- /dev/null
+++ b/templates/aaa-cert-config.xml.erb
@@ -0,0 +1,23 @@
+<aaa-cert-service-config xmlns="urn:opendaylight:yang:aaa:cert">
+  <use-config>true</use-config>
+  <use-mdsal><%= scope.lookupvar('opendaylight::enable_ha') %></use-mdsal>
+  <bundle-name>opendaylight</bundle-name>
+  <ctlKeystore>
+    <name>ctl.jks</name>
+    <alias>controller</alias>
+    <store-password><%= scope.lookupvar('opendaylight::tls_keystore_password') %></store-password>
+    <dname>CN=ODL, OU=Dev, O=LinuxFoundation, L=QC Montreal, C=CA</dname>
+    <validity>365</validity>
+    <key-alg>RSA</key-alg>
+    <sign-alg>SHA1WithRSAEncryption</sign-alg>
+    <keysize>1024</keysize>
+    <tls-protocols />
+    <cipher-suites>
+      <suite-name />
+    </cipher-suites>
+  </ctlKeystore>
+  <trustKeystore>
+    <name>truststore.jks</name>
+    <store-password><%= scope.lookupvar('opendaylight::tls_keystore_password') %></store-password>
+  </trustKeystore>
+</aaa-cert-service-config>