libreschool-epoptes/root/etc/ansible/roles/epoptes/tasks/certificates.yml

40 lines
1.5 KiB
YAML

---
- name: "Make sure epoptes certificates directory is present for {{ epoptesgroup }}"
local_action:
module: file
mode: 0755
state: directory
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}"
- name: "Make sure epoptes certificates directory is present"
local_action:
module: file
mode: 0755
state: directory
path: "/var/lib/nethserver/secrets/epoptes"
- name: Generate a Self Signed OpenSSL certificate key
local_action:
module: openssl_privatekey
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
size: 4096
- name: Generate a Self Signed OpenSSL certificate sign request
local_action:
module: openssl_csr
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
- name: Generate a Self Signed OpenSSL certificate
local_action:
module: openssl_certificate
path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.crt"
privatekey_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.key"
csr_path: "/var/lib/nethserver/secrets/epoptes/{{ epoptesgroup }}/server.csr"
provider: selfsigned
# 10 years from now, this is the default
selfsigned_not_after: "+3650d"
# valid since the Epoch, because sometimes CMOS battery fails
selfsigned_not_before: "19700101000100Z"