allow setting CHALLENGE_CHECK_TYPE per domain

Author: davidc

manifests/domain.pp

@@ -26,6 +26,8 @@
 #   [*use_single_acl*]
 #     Bool if true: only one acl directory must be specified.
 #     If false: for each subdomain on acl. Default true.
+#   [*domain_challenge_check_type*]
+#     Protocol to use for the challenge (http or https). Defaults to http.
 #   [*sub_domains*]
 #     Array with all subdomains for specified certificate. Defaults to empty Array.
 #   [*domain_private_key_alg*]
@@ -74,6 +76,7 @@
   $domain                    = $name,
   $acl                       = $getssl::params::acl,
   $use_single_acl            = $getssl::params::use_single_acl,
+  $domain_challenge_check_type = $getssl::params::domain_challenge_check_type,
   $sub_domains               = $getssl::params::sub_domains,
   $domain_private_key_alg    = $getssl::params::domain_private_key_alg,
   $domain_account_key_length = $getssl::params::domain_account_key_length,
@@ -97,6 +100,10 @@
   validate_integer($domain_renew_allow)
   validate_bool($domain_check_remote, $use_single_acl)
 
+  if $domain_challenge_check_type {
+    validate_string($domain_challenge_check_type)
+  }
+
   if $ca_cert_location {
     validate_string($ca_cert_location)
   }
@@ -192,7 +199,8 @@
       'domain_renew_allow'        => $domain_renew_allow,
       'domain_server_type'        => $domain_server_type,
       'sub_domains'               => $sub_domains,
-      'use_single_acl'            => $use_single_acl
+      'use_single_acl'            => $use_single_acl,
+      'domain_challenge_check_type' => $domain_challenge_check_type
     }),
     notify  => $config_notifiers,
   }

manifests/params.pp

@@ -27,6 +27,7 @@
   $domain                    = undef
   $acl                       = []
   $use_single_acl            = true
+  $domain_challenge_check_type = undef
   $sub_domains               = []
   $domain_private_key_alg    = 'rsa'
   $domain_account_key_length = 4096

templates/domain_getssl.cfg.epp

@@ -26,6 +26,10 @@ ACL=(<% $acl.each |$value| { %>'<%= $value %>'<% } %>)
 #Enable use of a single ACL for all checks
 USE_SINGLE_ACL=<%= $use_single_acl -%>
 
+<% if $domain_challenge_check_type { -%>
+CHALLENGE_CHECK_TYPE="<%= $domain_challenge_check_type -%>"
+<% } -%>
+
 # Location for all your certs, these can either be on the server (full path name)
 # or using ssh /sftp as for the ACL
 <% if $domain_cert_location { -%>