puppetlabs / puppetlabs-java_ks

Uses a combination of keytool and openssl to manage entries in a Java keystore
Apache License 2.0
34 stars 98 forks source link

truststore is not idempotent for chain pem certificates #455

Open SvenVD-be opened 4 months ago

SvenVD-be commented 4 months ago

Describe the Bug

Consider

java_ks { "$cert_alias:$truststore_path": ensure => latest, certificate => $cert_path_unique, trustcacerts => true, password => $truststore_passwd }

If $cert_path_unique is a pem file which contains an intermediate and a leaf certificate then puppet outputs the following every run Java_ks[jREDACTED]/ensure: ensure changed 'present' to 'latest'

Expected Behavior

Puppet should be idempotent

Environment