da73bbd73c
* The ssh key may be created manually prior the task execution with a passphrase. And the task will be executed on the same key. * The ssh key may be broken and not usable. The module will check the private key and if the key is password protected or broken, it will be overridden. The check of the ssh key performed by retrieve the public key from the private key. Set the "self.force" check before the "isPrivateKeyValid" check. In case of any issue with the "isPrivateKeyValid" function, the user will be able to force the regeneration of the key with the "force: yes" argument.
95 lines
2.4 KiB
YAML
95 lines
2.4 KiB
YAML
- name: Generate privatekey1 - standard
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey1'
|
|
register: privatekey1_result
|
|
|
|
- name: Generate privatekey1 - standard (idempotent)
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey1'
|
|
register: privatekey1_idem_result
|
|
|
|
- name: Generate privatekey2 - size 2048
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey2'
|
|
size: 2048
|
|
|
|
- name: Generate privatekey3 - type dsa
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey3'
|
|
type: dsa
|
|
|
|
- name: Generate privatekey4 - standard
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey4'
|
|
|
|
- name: Delete privatekey4 - standard
|
|
openssh_keypair:
|
|
state: absent
|
|
path: '{{ output_dir }}/privatekey4'
|
|
|
|
- name: Generate privatekey5 - standard
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey5'
|
|
register: publickey_gen
|
|
|
|
- name: Generate privatekey6
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey6'
|
|
type: rsa
|
|
|
|
- name: Regenerate privatekey6 via force
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey6'
|
|
type: rsa
|
|
force: yes
|
|
register: output_regenerated_via_force
|
|
|
|
- name: Create broken key
|
|
copy:
|
|
dest: '{{ item }}'
|
|
content: ''
|
|
mode: '0700'
|
|
loop:
|
|
- '{{ output_dir }}/privatekeybroken'
|
|
- '{{ output_dir }}/privatekeybroken.pub'
|
|
|
|
- name: Regenerate broken key
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekeybroken'
|
|
type: rsa
|
|
register: output_broken
|
|
|
|
- name: Generate read-only private key
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekeyreadonly'
|
|
type: rsa
|
|
mode: '0200'
|
|
|
|
- name: Regenerate read-only private key via force
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekeyreadonly'
|
|
type: rsa
|
|
force: yes
|
|
register: output_read_only
|
|
|
|
- name: Generate privatekey7 - standard with comment
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey7'
|
|
comment: 'test@privatekey7'
|
|
register: privatekey7_result
|
|
|
|
- name: Modify privatekey7 comment
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey7'
|
|
comment: 'test_modified@privatekey7'
|
|
register: privatekey7_modified_result
|
|
|
|
- name: Generate password protected key
|
|
command: 'ssh-keygen -f {{ output_dir }}/privatekey8 -N password'
|
|
|
|
- name: Try to modify the password protected key - should be overridden
|
|
openssh_keypair:
|
|
path: '{{ output_dir }}/privatekey8'
|
|
register: privatekey8_result
|
|
|
|
- import_tasks: ../tests/validate.yml
|