Integrating the server generated client inside firefox certificates. Publishing on ks share to be updatable by clients.

This commit is contained in:
Emiliano Vavassori 2015-08-20 23:37:20 +02:00
parent be974a0ca2
commit 800e37f371
3 changed files with 26 additions and 0 deletions

Binary file not shown.

View File

@ -0,0 +1,20 @@
---
# Creates a cert8.db file valid for clients, to be installed on client machines
# to recognize https proxy functionalities.
- name: Scarico ca.crt
get_url:
url: "http://localhost/proxy.crt"
dest: /tmp/ca.crt
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
copy:
src: cert8.db
dest: /var/lib/nethserver/ibay/ks/cert8.db
owner: root
mode: 0644
sudo: yes
- name: Integro la CA nel db
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks
sudo: yes

View File

@ -3,3 +3,9 @@
tags:
- kickstart
- ks
- include: firefoxcert.yml
tags:
- kickstart
- ks
- firefox