37 lines
972 B
YAML
37 lines
972 B
YAML
---
|
||
# Creates a cert8.db file valid for clients, to be installed on client machines
|
||
# to recognize https proxy functionalities.
|
||
|
||
- name: Scarico ca.crt
|
||
get_url:
|
||
url: "http://localhost/proxy.crt"
|
||
dest: /tmp/ca.crt
|
||
|
||
- name: Creo directory per certificati
|
||
file:
|
||
path: /var/lib/nethserver/ibay/ks/server-ca
|
||
state: directory
|
||
owner: root
|
||
mode: 0755
|
||
become: yes
|
||
|
||
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
||
copy:
|
||
src: cert8.db
|
||
dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db
|
||
owner: root
|
||
mode: 0644
|
||
become: yes
|
||
|
||
- name: Integro la CA nel db
|
||
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca
|
||
become: yes
|
||
|
||
- name: Pulizia
|
||
shell: rm -f {{ item }}
|
||
become: yes
|
||
with_items:
|
||
- /tmp/ca.crt
|
||
- /var/lib/nethserver/ibay/ks/server-ca/key3.db
|
||
- /var/lib/nethserver/ibay/ks/server-ca/secmod.db
|