Skip to content

truststore is not idempotent for chain pem certificates #455

@SvenVD-be

Description

@SvenVD-be

Describe the Bug

Consider

java_ks { "$cert_alias:$truststore_path":
ensure => latest,
certificate => $cert_path_unique,
trustcacerts => true,
password => $truststore_passwd
}

If $cert_path_unique is a pem file which contains an intermediate and a leaf certificate then puppet outputs the following every run
Java_ks[jREDACTED]/ensure: ensure changed 'present' to 'latest'

Expected Behavior

Puppet should be idempotent

Environment

  • Version [e.g. 5.0.0]
  • Platform [e.g. puppet 8 rhel 8]

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions