capistrano-psw 1.0.0.pre32 → 1.0.0.pre33

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d01081943f864d84807135605d48b146cd5c2b45
-  data.tar.gz: ea7389d436a56f1303dc9ac45d1b109365296adc
+  metadata.gz: 9a6bb05a51b8f52e1d0794467c9f899642d06359
+  data.tar.gz: 3ef12e185ea7a4dca4a15e4a7d472c8e6c37154b
 SHA512:
-  metadata.gz: 1fd791a3ddfd38e29adcf83ee113baf39a8cd79f5f1ab949e2f59eadb9738cecc628d14d3e6820a140d6649bcd603de5673c4a0c6bd85e5593dd27d9f7711b94
-  data.tar.gz: 6e45dd4eea06315d013629b44e7b99d32700b4dd042cadd05f9ea4d35462b8aad690264a309ef0892b0995319acfb9ae7f36d3b812401b51217afc04ee27f53f
+  metadata.gz: d0deda336d97eb31dc1020954c9b464a5a3d16bc69059a55089c5b419efff15d9fe55f4d894f9ed64404b62c33518b5c326586dbfbd32b190fb261800e6b0b37
+  data.tar.gz: 79a7d0e87ad864eaf211f70fa10ef6a5fc7682157346efb21d781d11f158b5479c30606f3014c5de52ee6b6bc8cbf0ffc7b2499e9c63f97fa755b99ac7bb2f9e

data/README.md

@@ -306,6 +306,29 @@ Parameters:
 *explode_directory [String] - The directory to which the exploded contents will be written
 *war_file_location [String] - The absolute path of the WAR file.
 
+### psw_javaee:deploy_ssl_certs
+This task will copy SSL certificates defined in the application's shared directory
+to /etc/ssl/certs and /etc/ssl/private.  a Java Keystore will be created for Tomcat's reference.
+The task takes the following parameters:
+*[String] ssl_cert_file - the path to the SSL certificate file
+*[String] ssl_key_file - the path to the SSL key file
+*[String] ssl_chain_file - the path to the SSL chain file
+*[String] keystore_password - the password that should be used to secure the keystore.
+   The default value is 'changeit'.
+*[String] keystore_file - the file path of the keystore.
+   The default value '/<Capistrano Shared Path>/tomcat/keystore.jks'
+
+### psw_javaee:configure_tomcat
+This task task will override the Tomcat server definition.  This method allows consumers to 
+define an ERB template as well as pass in a ruby binding to populate it.
+The task takes the following parameters:
+
+*[Object] template_binding - the Ruby binding used for the Template
+*[String] tomcat_config_template_path - path to the server template
+*[String] config_filename - the name of the configuration file
+*[String] tomcat_config_file_dir - The subdirectory in /<Capistrano Shared Path> which
+   will hold the completed file.
+
 ## License
 
 2014 Lexmark International Technology S.A.  All rights reserved.

data/lib/capistrano/psw/version.rb

@@ -10,6 +10,6 @@
 
 module Capistrano
   module Psw
-    VERSION = "1.0.0.pre32"
+    VERSION = "1.0.0.pre33"
   end
 end

data/resources/lib/capistrano/tasks/psw-javaee.cap

@@ -12,6 +12,30 @@
 # *explode_directory [String] - The directory to which the exploded contents will be written
 # *war_file_location [String] - The absolute path of the WAR file.
 #
+# === psw_javaee:deploy_ssl_certs
+# This task will copy SSL certificates defined in the application's shared directory
+# to /etc/ssl/certs and /etc/ssl/private.  a Java Keystore will be created for Tomcat's reference.
+# The task takes the following parameters:
+#
+# @param [String] ssl_cert_file - the path to the SSL certificate file
+# @param [String] ssl_key_file - the path to the SSL key file
+# @param [String] ssl_chain_file - the path to the SSL chain file
+# @param [String] keystore_password - the password that should be used to secure the keystore.
+#   The default value is 'changeit'.
+# @param [String] keystore_file - the file path of the keystore.
+#   The default value '/<Capistrano Shared Path>/tomcat/keystore.jks'
+#
+# === psw_javaee:configure_tomcat
+# This task task will override the Tomcat server definition.  This method allows consumers to 
+# define an ERB template as well as pass in a ruby binding to populate it.
+# The task takes the following parameters:
+#
+# @param [Object] template_binding - the Ruby binding used for the Template
+# @param [String] tomcat_config_template_path - path to the server template
+# @param [String] config_filename - the name of the configuration file
+# @param [String] tomcat_config_file_dir - The subdirectory in /<Capistrano Shared Path> which
+#   will hold the completed file.
+#
 # == Contact
 #
 # Author::    Lexmark International Technology S.A.
@@ -30,4 +54,85 @@ namespace :psw_javaee do
      execute("cd #{args[:explode_directory]} ; /usr/bin/jar xf #{args[:war_file_location]}")
     end
   end
+
+  task :deploy_ssl_certs, :ssl_cert_file, :ssl_key_file, :ssl_chain_file, :keystore_password, :keystore_file  do |t, args|
+    on roles(:app) do |host|
+      info "Creating cert directory..."
+      ssl_cert_dir = "/etc/ssl/certs"
+      sudo :mkdir, '-p', ssl_cert_dir
+
+      ssl_private_dir = "/etc/ssl/private"
+      info "Creating cert key directory..."
+      sudo :mkdir, '-p', ssl_private_dir
+
+      ssl_cert_filename = Pathname.new(args[:ssl_cert_file]).basename
+      ssl_cert_path = "#{ssl_cert_dir}/#{ssl_cert_filename}"
+      info "Copying certificate (#{args[:ssl_cert_file]}) to key directory..."
+      sudo :rm, "-rf", ssl_cert_path
+      sudo :cp, args[:ssl_cert_file], ssl_cert_dir
+      sudo :chmod, '600', ssl_cert_path
+
+      ssl_key_filename = Pathname.new(args[:ssl_key_file]).basename
+      ssl_key_path = "#{ssl_private_dir}/#{ssl_key_filename}"
+      info "Copying certificate key (#{args[:ssl_key_file]}) to key directory..."
+      sudo :rm, '-rf', ssl_key_path
+      sudo :cp, args[:ssl_key_file], ssl_private_dir
+      sudo :chmod, '600', ssl_key_path
+
+      ssl_chain_filename = Pathname.new(args[:ssl_chain_file]).basename
+      ssl_chain_path = "#{ssl_cert_dir}/#{ssl_chain_filename}"
+      info "Copying certificate chain (#{args[:ssl_chain_file]}) to cert directory..."
+      sudo :rm, '-rf', ssl_chain_path
+      sudo :cp, args[:ssl_chain_file], ssl_cert_dir
+      sudo :chmod, '600', ssl_chain_path
+
+      info "Creating certificate keystore..."
+      keystore_password = args[:keystore_password] unless args[:keystore_password].nil?
+			password ||= "changeit"
+
+      keystore_file = args[:keystore_file] unless args[:keystore_file].nil?
+      keystore_file ||= File.join("#{shared_path}","/tomcat/keystore.jks")
+
+      sudo("openssl pkcs12 -inkey #{ssl_key_path} -in #{ssl_cert_path} -CAfile #{ssl_chain_path} -chain -export -out #{keystore_file} -password pass:#{args[:keystore_password]}")
+    end
+  end
+
+  task :configure_tomcat, :template_binding, :tomcat_config_template_path, :config_filename, :tomcat_config_file_dir  do |t, args|
+    on roles(:app) do |host|
+      info "Configuring tomcat..."
+
+      config_template_path = args[:tomcat_config_template_path]
+      unless config_template_path.nil? || config_template_path.length == 0
+      	config_filename = args[:config_filename]
+
+        info "Adding server template #{config_template_path} to tomcat..."      
+
+        config_template = ERB.new File.new(config_template_path).read, nil, "%"
+        template_binding = (!args[:template_binding].nil? && args[:template_binding]) || binding
+        config_file = config_template.result(template_binding)
+        
+        tmp_site_file = Tempfile.new("#{config_filename}-")
+        tmp_site_file.write(config_file)
+        tmp_site_file.flush
+
+        shared_tomcat_config_dir = File.join("#{shared_path}","#{args[:tomcat_config_file_dir]}")
+        shared_tomcat_config_file = File.join("#{shared_tomcat_config_dir}","#{config_filename}")
+
+        info "Creating shared tomcat configuration directory #{shared_tomcat_config_dir}..."
+        execute :mkdir, '-p', shared_tomcat_config_dir
+
+        info "Uploading tomcat server configuration #{config_filename}..."
+        upload! "#{tmp_site_file.path}", "#{shared_tomcat_config_file}"
+        sudo :chmod, '0755', shared_tomcat_config_file
+
+        #symlink to config file
+        tomcat_config_file = File.join("/etc/tomcat7","#{config_filename}")
+        info "Creating a symlink from shared server configuration file #{shared_tomcat_config_file} as #{tomcat_config_file}..."
+        sudo :rm, '-rf', tomcat_config_file
+        sudo :ln, '-s', shared_tomcat_config_file, tomcat_config_file
+      else
+        info "A server template has not been defined for tomcat"
+      end
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-psw
 version: !ruby/object:Gem::Version
-  version: 1.0.0.pre32
+  version: 1.0.0.pre33
 platform: ruby
 authors:
 - Lexmark International Technology S.A
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-05 00:00:00.000000000 Z
+date: 2014-05-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler