diff --git a/roles/domain/tasks/main.yml b/roles/domain/tasks/main.yml index ed69b56..9f0721b 100644 --- a/roles/domain/tasks/main.yml +++ b/roles/domain/tasks/main.yml @@ -17,6 +17,11 @@ - domain - gui +- include: sslproxy.yml + tags: + - domain + - crt + - include: pkgs.yml tags: - domain diff --git a/roles/domain/tasks/sslproxy.yml b/roles/domain/tasks/sslproxy.yml new file mode 100644 index 0000000..9649c4b --- /dev/null +++ b/roles/domain/tasks/sslproxy.yml @@ -0,0 +1,16 @@ +--- +- name: Scarico il certificato client per proxy trasparente SSL + get_url: + url: http://{{ serverfqdn }}/proxy.crt + dest: /usr/local/share/ca-certificates/{{ domainfull }}/ca.crt + sudo: yes + +- name: Aggiungo il certificato a quelli utilizzati dal sistema + shell: update-ca-certificates + sudo: yes + +- name: Scarico il database dei certificati di FF con certificato server aggiornato. + get_url: + url: 'http://{{ serverfqdn }}/ks/cert8.db' + dest: /etc/firefox/profile/cert8.db + sudo: yes