config.pp

  file { $certs::params::keystore_password_file:
    content => undef,
    audit   => ['content'],
  }

  exec { "generate-ssl-keystore":
    command     => "openssl pkcs12 -export -in /etc/candlepin/certs/candlepin-ca.crt -inkey /etc/candlepin/certs/candlepin-ca.key -out ${katello_keystore} -name tomcat -CAfile ${candlepin_pub_cert} -caname root -password \"file:${certs::params::keystore_password_file}\"",
    path        => "/usr/bin",
    refreshonly => true,
    subscribe   => File["$certs::params::keystore_password_file"],
    notify      => Service["tomcat6"],
    require     => [File[$katello_pki_dir], Exec["deploy-candlepin-certificate-to-cp"]]
  }