java_ext Cookbook

This cookbook provides various helpers for dealing with Java in Chef.

Requirements

Java cookbook - This cookbook does not include_recipe "java", you should make sure java is installed.

Usage

Recipes

java_ext::jce - installs java cryptography extensions (policies) from Oracle's web site. As in the Java cookbook, you must accept Oracle's license terms by changing the node['java']['oracle']['accept_oracle_download_terms'] attribute to true.

LWRP

java_ext_keystore

This LWRP will generate a self-signed keypair in a keystore. The example is pretty self explanatory.

include_recipe "java"
java_ext_keystore "/tmp/keystore" do
  cert_alias "test-alias"
  dn "CN=avishai ish-shalom/O=fewbytes/"
  password "gargamel"
  with_certificate do |c|
    node.set["java_keys"]["my_cert"] = c
  end
end

Attributes:

dn - distinguinshed name
keystore_path - name attribute, the path of the keystore file
mode - file permissions mode
owner - keystore file owner
group - keystore file group
cert_alias - certificate alias in the keystore
password - keystore and private key password. Since the common use case is a single keystore housing a single keypair we use the same password for both.
java_bin_path - directory of java binaries. defaults to node["java"]["home_dir"]/bin

java_ext_truststore_certificate

This LWRP will import a certificate into a truststore, e.g.

java_ext_truststore_certificate "test-alias" do
  truststore_path "/tmp/truststore"
  certificate node["java_ext"]["certificate"]
  password "gargamel"
end