Support for self signed certificate

[clauded]

We use rundeck with foreman a we have a self signed certificate on the foreman server. We then use the foreman api to get the node list in rundeck. For this to work, we need to import the self-signed certificates in the truststore (the foreman CA and the foreman SSL cert). We also need to fix /etc/rundeck/profile. It would be nice to have a sub module to configure this. Right now we use the following code but it's not perfect as the rundeck module already manages the profile file.

Here's the code we used:

  file { '/root/foreman.local.pem':
    source  => "puppet:///modules/${module_name}/rundeck/foreman.local.pem",
    mode    => '0600',
    require => Class['rundeck'],
  }->
  exec { 'import-foreman-self-signed-certificates':
    command =>
      'keytool -import -alias foreman_cert -file /root/foreman.local.pem -keystore /etc/rundeck/ssl/truststore -storepass adminadmin -noprompt &&\
       keytool -import -alias foreman_ca -file /var/lib/puppet/ssl/certs/ca.pem -keystore /etc/rundeck/ssl/truststore -storepass adminadmin -noprompt',
    path    => '/usr/bin:/usr/sbin:/bin:/sbin',
    creates => '/etc/rundeck/ssl/truststore',
  }
  file_line { 'fix-etc-rdeck-ssl-opts':
    path    => '/etc/rundeck/profile',
    line    => 'export RDECK_SSL_OPTS="-Djavax.net.ssl.trustStore=/etc/rundeck/ssl/truststore -Djavax.net.ssl.trustStoreType=jks -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol"',
    match   => '^export\ RDECK_SSL_OPTS.*$',
    notify  => Class['rundeck::service'],
  }->
  file_line { 'fix-etc-rundeck-jvm':
    path    => '/etc/rundeck/profile',
    line    => 'export RDECK_JVM="$RDECK_JVM $RDECK_SSL_OPTS"',
    after   => '^export\ RDECK_SSL_OPTS.*$',
    notify  => Class['rundeck::service'],
  }

[clauded]

I found the following workaround so I'm closing the issue :

$truststore = '/etc/rundeck/ssl/truststore'
$truststore_password = 'adminadmin'
class { 'rundeck':
...
truststore => $truststore,
truststore_password => $truststore_password,
jvm_args => "-Xmx1024m -Xms256m -server -Djavax.net.ssl.trustStore=${truststore} -Djavax.net.ssl.trustStoreType=jks -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol",
...