diff --git a/roles/kickstart/files/cert8.db b/roles/kickstart/files/cert8.db new file mode 100644 index 0000000..ac40a33 Binary files /dev/null and b/roles/kickstart/files/cert8.db differ diff --git a/roles/kickstart/tasks/firefoxcert.yml b/roles/kickstart/tasks/firefoxcert.yml new file mode 100644 index 0000000..3b1a64a --- /dev/null +++ b/roles/kickstart/tasks/firefoxcert.yml @@ -0,0 +1,20 @@ +--- +# Creates a cert8.db file valid for clients, to be installed on client machines +# to recognize https proxy functionalities. + +- name: Scarico ca.crt + get_url: + url: "http://localhost/proxy.crt" + dest: /tmp/ca.crt + +- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)' + copy: + src: cert8.db + dest: /var/lib/nethserver/ibay/ks/cert8.db + owner: root + mode: 0644 + sudo: yes + +- name: Integro la CA nel db + shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks + sudo: yes diff --git a/roles/kickstart/tasks/main.yml b/roles/kickstart/tasks/main.yml index fe769db..a1b9448 100644 --- a/roles/kickstart/tasks/main.yml +++ b/roles/kickstart/tasks/main.yml @@ -3,3 +3,9 @@ tags: - kickstart - ks + +- include: firefoxcert.yml + tags: + - kickstart + - ks + - firefox