From ef3ec064639f8e716cefac494575d06cb92f30ea Mon Sep 17 00:00:00 2001 From: Calvin Walton Date: Thu, 17 Jan 2013 11:16:24 -0500 Subject: [PATCH 1/2] Export ECDSA hostkeys Since these are only available with a combination of both a recent openssh and a recent facter, I've made it conditional on the presence of the sshecdsakey fact. --- manifests/hostkeys.pp | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/manifests/hostkeys.pp b/manifests/hostkeys.pp index 136e565dd..00340284b 100644 --- a/manifests/hostkeys.pp +++ b/manifests/hostkeys.pp @@ -12,4 +12,10 @@ type => rsa, key => $::sshrsakey, } + if $::sshecdsakey { + @@sshkey { "${::fqdn}_ecdsa": + host_aliases => $host_aliases, + type => 'ecdsa-sha2-nistp256', + key => $::sshecdsakey, + } } From 6215b2498a40d68683a867576cc328f2310e0621 Mon Sep 17 00:00:00 2001 From: Calvin Walton Date: Thu, 17 Jan 2013 13:44:09 -0500 Subject: [PATCH 2/2] Add a missing } character, oops... --- manifests/hostkeys.pp | 1 + 1 file changed, 1 insertion(+) diff --git a/manifests/hostkeys.pp b/manifests/hostkeys.pp index 00340284b..7ea3596f3 100644 --- a/manifests/hostkeys.pp +++ b/manifests/hostkeys.pp @@ -17,5 +17,6 @@ host_aliases => $host_aliases, type => 'ecdsa-sha2-nistp256', key => $::sshecdsakey, + } } }