forked from LibreSchool/server-config
Integrating the server generated client inside firefox certificates. Publishing on ks share to be updatable by clients.
This commit is contained in:
parent
be974a0ca2
commit
800e37f371
BIN
roles/kickstart/files/cert8.db
Normal file
BIN
roles/kickstart/files/cert8.db
Normal file
Binary file not shown.
20
roles/kickstart/tasks/firefoxcert.yml
Normal file
20
roles/kickstart/tasks/firefoxcert.yml
Normal file
@ -0,0 +1,20 @@
|
||||
---
|
||||
# Creates a cert8.db file valid for clients, to be installed on client machines
|
||||
# to recognize https proxy functionalities.
|
||||
|
||||
- name: Scarico ca.crt
|
||||
get_url:
|
||||
url: "http://localhost/proxy.crt"
|
||||
dest: /tmp/ca.crt
|
||||
|
||||
- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
|
||||
copy:
|
||||
src: cert8.db
|
||||
dest: /var/lib/nethserver/ibay/ks/cert8.db
|
||||
owner: root
|
||||
mode: 0644
|
||||
sudo: yes
|
||||
|
||||
- name: Integro la CA nel db
|
||||
shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks
|
||||
sudo: yes
|
@ -3,3 +3,9 @@
|
||||
tags:
|
||||
- kickstart
|
||||
- ks
|
||||
|
||||
- include: firefoxcert.yml
|
||||
tags:
|
||||
- kickstart
|
||||
- ks
|
||||
- firefox
|
||||
|
Loading…
x
Reference in New Issue
Block a user