recipe for adding certs to keytool

keytool.rb

keystore = "/etc/java-6-sun/security/cacerts"
keystore_pass = "foobar"

# you'll need foo.cert et. al. in files/default
certs = %w{foo bar bang}

certs.each do |cert|
  cookbook_file "#{Chef::Config[:file_cache_path]}/#{cert}.cert" do
    source "#{cert}.cert"
  end

  execute "import #{cert} cert" do
    command "keytool -import -trustcacerts -alias #{cert} -file #{Chef::Config[:file_cache_path]}/#{cert}.cert -keystore #{keystore} -storepass #{keystore_pass} -noprompt"
    only_if { File.exists?("#{keystore}") }
    not_if "keytool -list -keystore #{keystore} -storepass #{keystore_pass} -alias #{cert}"
  end
end