@@ -71,7 +71,7 @@ def next_state
71
71
route = @machine . session . route_to ( :ca , ssl_context : @ssl_context )
72
72
_ , pem = route . get_certificate ( Puppet ::SSL ::CA_NAME , ssl_context : @ssl_context )
73
73
if @machine . ca_fingerprint
74
- actual_digest = Puppet :: SSL :: Digest . new ( @machine . digest , pem ) . to_hex
74
+ actual_digest = @machine . digest_as_hex ( pem )
75
75
expected_digest = @machine . ca_fingerprint . scan ( /../ ) . join ( ':' ) . upcase
76
76
if actual_digest == expected_digest
77
77
Puppet . info ( _ ( "Verified CA bundle with digest (%{digest_type}) %{actual_digest}" ) %
@@ -139,8 +139,7 @@ def download_ca(ssl_ctx, last_update)
139
139
next_ctx = @ssl_provider . create_root_context ( cacerts : cacerts , revocation : false )
140
140
@cert_provider . save_cacerts ( cacerts )
141
141
142
- digest = Puppet ::SSL ::Digest . new ( @machine . digest , pem ) . to_hex
143
- Puppet . info ( "Refreshed CA certificate: #{ digest } " )
142
+ Puppet . info ( "Refreshed CA certificate: #{ @machine . digest_as_hex ( pem ) } " )
144
143
145
144
next_ctx
146
145
end
@@ -235,8 +234,7 @@ def download_crl(ssl_ctx, last_update)
235
234
next_ctx = @ssl_provider . create_root_context ( cacerts : ssl_ctx [ :cacerts ] , crls : crls )
236
235
@cert_provider . save_crls ( crls )
237
236
238
- digest = Puppet ::SSL ::Digest . new ( @machine . digest , pem ) . to_hex
239
- Puppet . info ( "Refreshed CRL: #{ digest } " )
237
+ Puppet . info ( "Refreshed CRL: #{ @machine . digest_as_hex ( pem ) } " )
240
238
241
239
next_ctx
242
240
end
@@ -517,6 +515,10 @@ def unlock
517
515
@lockfile . unlock
518
516
end
519
517
518
+ def digest_as_hex ( str )
519
+ Puppet ::SSL ::Digest . new ( digest , str ) . to_hex
520
+ end
521
+
520
522
private
521
523
522
524
def run_machine ( state , stop )
0 commit comments