Trying to regenerate CA.

This commit is contained in:
Emiliano Vavassori 2015-11-02 07:43:05 +01:00
parent cd8e43d540
commit 5c7e912cd4
3 changed files with 7 additions and 3 deletions

View File

@ -13,6 +13,7 @@ dhcprange_start: 192.168.1.10
dhcprange_end: 192.168.1.50
extdnsserver1: 208.67.222.222
extdnsserver2: 208.67.220.220
org_email: info@bglug.it
org_company: Istituto Comprensivo 'Mastri Caravaggini'
org_countrycode: IT
org_department: "Laboratorio 1"

View File

@ -1,7 +1,7 @@
---
# Copia le configurazioni per il dominio in locale sul server.
- name: Copia le configurazioni di dominio.
copy: src=../../../domain.yml dest=/etc/domain.yml force=no
copy: src=../../../domain.yml dest=/etc/domain.yml force=yes
sudo: yes
- name: Creo la cartella per le configurazioni di Ansible

View File

@ -205,13 +205,16 @@
ignore_errors: true
register: chk_crt
changed_when: "'CommonName={{ ansible_local.domain.serverfqdn }}' not in chk_crt.stdout"
tags: regen-ca
- name: Completo la configurazione per produzione certificato
shell: /sbin/e-smith/db configuration setprop pki CertificateDuration 3650 CommonName {{ ansible_local.domain.serverfqdn }}
shell: /sbin/e-smith/db configuration setprop pki CertificateDuration 3650 CommonName {{ ansible_local.domain.serverfqdn }} CountryCode {{ ansible_local.domain.org_countrycode }} EmailAddress {{ ansible_local.domain.org_email }} Locality "{{ ansible_local.domain.org_city }}" Organization "{{ ansible_local.domain.org_company }}"
sudo: yes
when: chk_crt|changed
tags: regen-ca
when: chk_crt|changed or force_regen_ca|bool
- name: Rigenero il certificato con le informazioni inserite
shell: /sbin/e-smith/signal-event certificate-update
sudo: yes
when: chk_crt|changed or force_regen_ca|bool
tags: regen-ca