require 'puppet/util/platform'

# This file should be required instead of writing `require 'openssl'`
# or any library that loads openssl like `net/https`. This allows the
# core Puppet code to load correctly in JRuby environments that do not
# have a functioning openssl (eg a FIPS enabled one).

unless Puppet::Util::Platform.jruby_fips?
  require 'openssl'
  require 'net/https'
else
  # Even in JRuby we need to define the constants that are wrapped in
  # Indirections: Puppet::SSL::{Key, Certificate, CertificateRequest}
  module OpenSSL
    module PKey
      class RSA; end
    end

    module X509
      class Request; end
      class Certificate; end
    end
  end

  Puppet::SSL::Certificate.indirection.terminus = :none
  Puppet::SSL::CertificateRequest.indirection.terminus = :none
  Puppet::SSL::Key.indirection.terminus = :none
end
