---
# Creates a cert8.db file valid for clients, to be installed on client machines
# to recognize https proxy functionalities.

- name: Scarico ca.crt
  get_url:
    url: "http://localhost/proxy.crt"
    dest: /tmp/ca.crt

- name: 'Utilizzo cert8.db precedentemente fornito (pulito da FF appena aperto)'
  copy:
    src: cert8.db
    dest: /var/lib/nethserver/ibay/ks/cert8.db
    owner: root
    mode: 0644
  sudo: yes

- name: Integro la CA nel db
  shell: certutil -A -n "{{ ansible_local.domain.domainfull }}" -t "TCu,Cuw,Tuw" -i /tmp/ca.crt -d /var/lib/nethserver/ibay/ks
  sudo: yes

- name: Pulizia
  shell: rm -f {{ item }}
  sudo: yes
  with_items:
    - /tmp/ca.crt
    - /var/lib/nethserver/ibay/ks/key3.db
    - /var/lib/nethserver/ibay/ks/secmod.db