class ssl {
  group { 'ssl-cert':
    ensure => present,
  }

  file { [ "/etc/ssl", "/etc/ssl/certs" ]:
    ensure  => directory,
    owner   => "root",
    group   => "ssl-cert",
    mode    => '0755',
    require => Group['ssl-cert'],
  }

  file { [ "/etc/ssl/private", "/etc/ssl/dhparams" ]:
    ensure  => directory,
    owner   => "root",
    group   => "ssl-cert",
    mode    => '0750',
    require => [ File['/etc/ssl'], Group['ssl-cert'] ],
  }

  file { "/usr/local/bin/ssl-cert-check":
    ensure => present,
    owner   => "root",
    group   => "root",
    mode    => '755',
    source  => "puppet:///modules/ssl/ssl-cert-check",
  }
}