2015-08-20 23:37:20 +02:00
|
|
|
|
---
|
|
|
|
|
# Creates a cert8.db file valid for clients, to be installed on client machines
|
|
|
|
|
# to recognize https proxy functionalities.
|
|
|
|
|
|
|
|
|
|
- name: Scarico ca.crt
|
|
|
|
|
get_url:
|
|
|
|
|
url: "http://localhost/proxy.crt"
|
|
|
|
|
dest: /tmp/ca.crt
|
|
|
|
|
|
2015-10-02 02:33:59 +02:00
|
|
|
|
- name: Creo directory per certificati
|
|
|
|
|
file:
|
|
|
|
|
path: /var/lib/nethserver/ibay/ks/server-ca
|
|
|
|
|
state: directory
|
|
|
|
|
owner: root
|
|
|
|
|
mode: 0755
|
|
|
|
|
sudo: yes
|
|
|
|
|
|
2015-08-20 23:37:20 +02:00
|
|
|
|
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
|
|
|
|
copy:
|
|
|
|
|
src: cert8.db
|
2015-10-02 02:33:59 +02:00
|
|
|
|
dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db
|
2015-08-20 23:38:05 +02:00
|
|
|
|
owner: root
|
|
|
|
|
mode: 0644
|
2015-08-20 23:37:20 +02:00
|
|
|
|
sudo: yes
|
|
|
|
|
|
|
|
|
|
- name: Integro la CA nel db
|
2015-10-02 02:33:59 +02:00
|
|
|
|
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca
|
2015-08-20 23:37:20 +02:00
|
|
|
|
sudo: yes
|
2015-08-20 23:48:43 +02:00
|
|
|
|
|
|
|
|
|
- name: Pulizia
|
|
|
|
|
shell: rm -f {{ item }}
|
|
|
|
|
sudo: yes
|
|
|
|
|
with_items:
|
|
|
|
|
- /tmp/ca.crt
|
2015-10-02 02:33:59 +02:00
|
|
|
|
- /var/lib/nethserver/ibay/ks/server-ca/key3.db
|
|
|
|
|
- /var/lib/nethserver/ibay/ks/server-ca/secmod.db
|