Integrating the server generated client inside firefox certificates. Publishing on ks share to be updatable by clients.
This commit is contained in:
parent
be974a0ca2
commit
800e37f371
BIN
roles/kickstart/files/cert8.db
Normal file
BIN
roles/kickstart/files/cert8.db
Normal file
Binary file not shown.
20
roles/kickstart/tasks/firefoxcert.yml
Normal file
20
roles/kickstart/tasks/firefoxcert.yml
Normal file
@ -0,0 +1,20 @@
|
|||||||
|
---
|
||||||
|
# Creates a cert8.db file valid for clients, to be installed on client machines
|
||||||
|
# to recognize https proxy functionalities.
|
||||||
|
|
||||||
|
- name: Scarico ca.crt
|
||||||
|
get_url:
|
||||||
|
url: "http://localhost/proxy.crt"
|
||||||
|
dest: /tmp/ca.crt
|
||||||
|
|
||||||
|
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
||||||
|
copy:
|
||||||
|
src: cert8.db
|
||||||
|
dest: /var/lib/nethserver/ibay/ks/cert8.db
|
||||||
|
owner: root
|
||||||
|
mode: 0644
|
||||||
|
sudo: yes
|
||||||
|
|
||||||
|
- name: Integro la CA nel db
|
||||||
|
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks
|
||||||
|
sudo: yes
|
@ -3,3 +3,9 @@
|
|||||||
tags:
|
tags:
|
||||||
- kickstart
|
- kickstart
|
||||||
- ks
|
- ks
|
||||||
|
|
||||||
|
- include: firefoxcert.yml
|
||||||
|
tags:
|
||||||
|
- kickstart
|
||||||
|
- ks
|
||||||
|
- firefox
|
||||||
|
Loading…
x
Reference in New Issue
Block a user