sous-chefs / java

Development repository for the java cookbook
https://supermarket.chef.io/cookbooks/java
Apache License 2.0
386 stars 637 forks source link

Feature: STARTTLS parameter for the java_certificate resource #634

Closed freakinhippie closed 3 years ago

freakinhippie commented 3 years ago

:person_frowning: Problem Statement

The java_certificate resource is currently unable to fetch a TLS certificate from endpoints that use a TLS negotiation protocol other than HTTPS. The ability to fetch certificates from other endpoints such as smtp, mysql, ldap, etc would be very useful.

:grey_question: Possible Solution

Add a starttls property to the java_certificate resource and pass it to the openssl command as needed.

:arrow_heading_up: Describe alternatives you've considered

Short of using an entirely different resource or shelling out directly, this feature is missing.

:heavy_plus_sign: Additional context

I'm working on a pull request for this.

EMH333 commented 3 years ago

Present in release 8.4.0