server-config/roles/preseed/tasks/firefoxcert.yml

37 lines
972 B
YAML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
# Creates a cert8.db file valid for clients, to be installed on client machines
# to recognize https proxy functionalities.
- name: Scarico ca.crt
get_url:
url: "http://localhost/proxy.crt"
dest: /tmp/ca.crt
- name: Creo directory per certificati
file:
path: /var/lib/nethserver/ibay/ks/server-ca
state: directory
owner: root
mode: 0755
become: yes
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
copy:
src: cert8.db
dest: /var/lib/nethserver/ibay/ks/server-ca/cert8.db
owner: root
mode: 0644
become: yes
- name: Integro la CA nel db
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks/server-ca
become: yes
- name: Pulizia
shell: rm -f {{ item }}
become: yes
with_items:
- /tmp/ca.crt
- /var/lib/nethserver/ibay/ks/server-ca/key3.db
- /var/lib/nethserver/ibay/ks/server-ca/secmod.db