diff --git a/README.md b/README.md index fcdb513..9332a1c 100644 --- a/README.md +++ b/README.md @@ -2,3 +2,33 @@ very simple puppet module to create an NSS database and add a certificate and key via PEM files. + +## Example of setting up 389 ds certs + +``` +nssdb::create { '/etc/dirsrv/slapd-ldap1': + owner_id => 'nobody', + group_id => 'nobody', + mode => '0660', + password => 'example', + manage_certdir => false, +} + +nssdb::add_cert_and_key{ '/etc/dirsrv/slapd-ldap1': + nickname => 'Server-Cert', + cert => '/tmp/foo.pem', + key => '/tmp/foo.key', +} + +nssdb::add_cert { 'AlphaSSL CA': + certdir => '/etc/dirsrv/slapd-ldap1', + nickname => 'AlphaSSL CA', + cert => '/tmp/alphassl_intermediate.pem', +} + +nssdb::add_cert { 'GlobalSign Root CA': + certdir => '/etc/dirsrv/slapd-ldap1', + nickname => 'GlobalSign Root CA', + cert => '/tmp/globalsign_root.pem', +} +```