From f06b95be1bad75be39b9722112dd328750302419 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Thu, 20 Aug 2015 23:47:50 +0200 Subject: [PATCH] Added a section to manage local certificates for HTTPS transparent proxy. --- roles/domain/tasks/main.yml | 5 +++++ roles/domain/tasks/sslproxy.yml | 16 ++++++++++++++++ 2 files changed, 21 insertions(+) create mode 100644 roles/domain/tasks/sslproxy.yml diff --git a/roles/domain/tasks/main.yml b/roles/domain/tasks/main.yml index ed69b56..9f0721b 100644 --- a/roles/domain/tasks/main.yml +++ b/roles/domain/tasks/main.yml @@ -17,6 +17,11 @@ - domain - gui +- include: sslproxy.yml + tags: + - domain + - crt + - include: pkgs.yml tags: - domain diff --git a/roles/domain/tasks/sslproxy.yml b/roles/domain/tasks/sslproxy.yml new file mode 100644 index 0000000..9649c4b --- /dev/null +++ b/roles/domain/tasks/sslproxy.yml @@ -0,0 +1,16 @@ +--- +- name: Scarico il certificato client per proxy trasparente SSL + get_url: + url: http://{{ serverfqdn }}/proxy.crt + dest: /usr/local/share/ca-certificates/{{ domainfull }}/ca.crt + sudo: yes + +- name: Aggiungo il certificato a quelli utilizzati dal sistema + shell: update-ca-certificates + sudo: yes + +- name: Scarico il database dei certificati di FF con certificato server aggiornato. + get_url: + url: 'http://{{ serverfqdn }}/ks/cert8.db' + dest: /etc/firefox/profile/cert8.db + sudo: yes