--- # Creates a cert8.db file valid for clients, to be installed on client machines # to recognize https proxy functionalities. - name: Scarico ca.crt get_url: url: "http://localhost/proxy.crt" dest: /tmp/ca.crt - name: Creo directory per certificati file: path: /var/lib/nethserver/ibay/ks/server-ca state: directory owner: root mode: 0755 become: yes - name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)' copy: src: cert8.db dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db owner: root mode: 0644 become: yes - name: Integro la CA nel db shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca become: yes - name: Pulizia shell: rm -f {{ itemĀ }} become: yes with_items: - /tmp/ca.crt - /var/lib/nethserver/ibay/ks/server-ca/key3.db - /var/lib/nethserver/ibay/ks/server-ca/secmod.db