Comment 3 for bug 814974

Revision history for this message
Clint Byrum (clint-fewbar) wrote : Re: [Bug 814974] Re: config options need a "file" type

Excerpts from Nick Barcet's message of Fri Dec 09 12:43:35 UTC 2011:
> This would be very useful as well for setting up https enable site where
> the certificate file need to reside on every unit of the service.
>
> Using juju scp to each unit is the only workaround I could find right
> now, and it adds complexity to a simple juju-addunit.
>

Nick, agreed, this simplifies a lot of common tasks. The current work
around is to uuencode the file into a setting.

juju set cert=`uuencode file.pem` key=`uuencode file.key`

Would then be handled by config-changed by putting those in place as
the certs.

Note that ZK comms inside the network are unencrypted/unauthed, so
your key would be transmitted across the network in the clear, which is
probably a bad idea. In fact, I'm not sure juju is ready for secure work
until we sort the ZK issues in bug #804203.