Added a section to manage local certificates for HTTPS transparent proxy.

This commit is contained in:
Emiliano Vavassori 2015-08-20 23:47:50 +02:00
parent 1fdbcec7f5
commit f06b95be1b
2 changed files with 21 additions and 0 deletions

View File

@ -17,6 +17,11 @@
- domain
- gui
- include: sslproxy.yml
tags:
- domain
- crt
- include: pkgs.yml
tags:
- domain

View File

@ -0,0 +1,16 @@
---
- name: Scarico il certificato client per proxy trasparente SSL
get_url:
url: http://{{ serverfqdn }}/proxy.crt
dest: /usr/local/share/ca-certificates/{{ domainfull }}/ca.crt
sudo: yes
- name: Aggiungo il certificato a quelli utilizzati dal sistema
shell: update-ca-certificates
sudo: yes
- name: Scarico il database dei certificati di FF con certificato server aggiornato.
get_url:
url: 'http://{{ serverfqdn }}/ks/cert8.db'
dest: /etc/firefox/profile/cert8.db
sudo: yes