60 lines
1.8 KiB
YAML
60 lines
1.8 KiB
YAML
|
- name: RedHat - Enable the dynamic CA configuration feature
|
||
|
|
command: update-ca-trust force-enable
|
||
|
|
when: ansible_os_family == 'RedHat'
|
||
|
|
|
||
|
|
- name: RedHat - Retrieve test cacert
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/cacert.pem"
|
||
|
|
dest: "/etc/pki/ca-trust/source/anchors/ansible.pem"
|
||
|
|
when: ansible_os_family == 'RedHat'
|
||
|
|
|
||
|
|
- name: Get client cert/key
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/{{ item }}"
|
||
|
|
dest: "{{ remote_tmp_dir }}/{{ item }}"
|
||
|
|
with_items:
|
||
|
|
- client.pem
|
||
|
|
- client.key
|
||
|
|
|
||
|
|
- name: Suse - Retrieve test cacert
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/cacert.pem"
|
||
|
|
dest: "/etc/pki/trust/anchors/ansible.pem"
|
||
|
|
when: ansible_os_family == 'Suse'
|
||
|
|
|
||
|
|
- name: Debian - Retrieve test cacert
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/cacert.pem"
|
||
|
|
dest: "/usr/local/share/ca-certificates/ansible.crt"
|
||
|
|
when: ansible_os_family == 'Debian'
|
||
|
|
|
||
|
|
- name: Redhat - Update ca trust
|
||
|
|
command: update-ca-trust extract
|
||
|
|
when: ansible_os_family == 'RedHat'
|
||
|
|
|
||
|
|
- name: Debian/Suse - Update ca certificates
|
||
|
|
command: update-ca-certificates
|
||
|
|
when: ansible_os_family == 'Debian' or ansible_os_family == 'Suse'
|
||
|
|
|
||
|
|
- name: FreeBSD - Retrieve test cacert
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/cacert.pem"
|
||
|
|
dest: "/tmp/ansible.pem"
|
||
|
|
when: ansible_os_family == 'FreeBSD'
|
||
|
|
|
||
|
|
- name: FreeBSD - Add cacert to root certificate store
|
||
|
|
blockinfile:
|
||
|
|
path: "/etc/ssl/cert.pem"
|
||
|
|
block: "{{ lookup('file', '/tmp/ansible.pem') }}"
|
||
|
|
when: ansible_os_family == 'FreeBSD'
|
||
|
|
|
||
|
|
- name: MacOS - Retrieve test cacert
|
||
|
|
get_url:
|
||
|
|
url: "http://ansible.http.tests/cacert.pem"
|
||
|
|
dest: "/usr/local/etc/openssl/certs/ansible.pem"
|
||
|
|
when: ansible_os_family == 'Darwin'
|
||
|
|
|
||
|
|
- name: MacOS - Update ca certificates
|
||
|
|
command: /usr/local/opt/openssl/bin/c_rehash
|
||
|
|
when: ansible_os_family == 'Darwin'
|