Module: Puppet::Network::HttpPool

Defined in:
lib/vendor/puppet/network/http_pool.rb

Class Method Summary collapse

Class Method Details

.cert_setup(http) ⇒ Object

Use cert information from a Puppet client to set up the http object.



13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
 
# File 'lib/vendor/puppet/network/http_pool.rb', line 13

def self.cert_setup(http)
  if FileTest.exist?(Puppet[:hostcert]) and FileTest.exist?(Puppet[:localcacert])
    http.cert_store  = ssl_host.ssl_store
    http.ca_file     = Puppet[:localcacert]
    http.cert        = ssl_host.certificate.content
    http.verify_mode = OpenSSL::SSL::VERIFY_PEER
    http.key         = ssl_host.key.content
  else
    # We don't have the local certificates, so we don't do any verification
    # or setup at this early stage.  REVISIT: Shouldn't we supply the local
    # certificate details if we have them?  The original code didn't.
    # --daniel 2012-06-03

    # Ruby 1.8 defaulted to this, but 1.9 defaults to peer verify, and we
    # almost always talk to a dedicated, not-standard CA that isn't trusted
    # out of the box.  This forces the expected state.
    http.verify_mode = OpenSSL::SSL::VERIFY_NONE
  end
end

.http_instance(host, port, reset = false) ⇒ Object

Retrieve a cached http instance if caching is enabled, else return a new one.



35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'lib/vendor/puppet/network/http_pool.rb', line 35

def self.http_instance(host, port, reset = false)
  args = [host, port]
  if Puppet[:http_proxy_host] == "none"
    args << nil << nil
  else
    args << Puppet[:http_proxy_host] << Puppet[:http_proxy_port]
  end
  http = Net::HTTP.new(*args)

  # Pop open the http client a little; older versions of Net::HTTP(s) didn't
  # give us a reader for ca_file... Grr...
  class << http; attr_accessor :ca_file; end

  http.use_ssl = true
  # Use configured timeout (#1176)
  http.read_timeout = Puppet[:configtimeout]
  http.open_timeout = Puppet[:configtimeout]

  cert_setup(http)

  http
end

.ssl_host ⇒ Object

Use the global localhost instance.



8
9
10
 
# File 'lib/vendor/puppet/network/http_pool.rb', line 8

def self.ssl_host
  Puppet::SSL::Host.localhost
end