ipa_certificate 'short-hostname-cert' do
  pem_cert  '/tmp/short-hostname-cert.crt'
  pem_key   '/tmp/short-hostname-cert.key''
end

ipa_certificate 'fqdn-cert' do
  pem_cert      '/tmp/fqdn-cert.crt'
  pem_key       '/tmp/fqdn-cert.key'
  req_subject   node['fqdn']
  req_principal "host/#{node['fqdn']}"
end

ipa_certificate 'fqdn-cert-rabbitmq' do
  pem_cert       '/etc/rabbitmq/fqdn-cert-rabbitmq.crt'
  pem_cert_owner 'rabbitmq'
  pem_cert_group 'rabbitmq'
  pem_cert_mode  '0655'
  pem_key        '/etc/rabbitmq/fqdn-cert-rabbitmq.key'
  pem_key_owner  'rabbitmq'
  pem_key_group  'rabbitmq'
  pem_key_mode   '0660'
  req_subject    node['fqdn']
  req_principal  "host/#{node['fqdn']}"
end