summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/ca.yml
diff options
context:
space:
mode:
authorMatthieu Saulnier <fantom@fedoraproject.org>2019-02-17 17:00:40 +0100
committerMatthieu Saulnier <fantom@fedoraproject.org>2019-02-17 17:00:40 +0100
commitc3629a8be52a5a508a80887d1293e7fffb9c45be (patch)
treebcff459ca4cb30db6c572b1695e0d44d07941317 /roles/common/tasks/ca.yml
parent41eedacd2b2d0a25be93280555c53d28a7bc6060 (diff)
downloadplaybooks-ansible-c3629a8be52a5a508a80887d1293e7fffb9c45be.tar.gz
playbooks-ansible-c3629a8be52a5a508a80887d1293e7fffb9c45be.tar.xz
playbooks-ansible-c3629a8be52a5a508a80887d1293e7fffb9c45be.zip
Minor changes:
remove meta which was false add http header in caddyfile update keys and certificates version add authority certification informations in dns zone files
Diffstat (limited to 'roles/common/tasks/ca.yml')
-rw-r--r--roles/common/tasks/ca.yml11
1 files changed, 6 insertions, 5 deletions
diff --git a/roles/common/tasks/ca.yml b/roles/common/tasks/ca.yml
index 72f1730..74bde08 100644
--- a/roles/common/tasks/ca.yml
+++ b/roles/common/tasks/ca.yml
@@ -3,15 +3,16 @@
src: root.pem
dest: /etc/pki/ca-trust/source/anchors/root.pem
mode: 0444
+ register: cafile
-- name: Installation de l'autorité de certification CACert
- copy:
- src: cacert.pem
- dest: /etc/pki/ca-trust/source/anchors/cacert.pem
- mode: 0444
+- name: Désinstallation de l'autorité de certification CACert
+ file:
+ path: /etc/pki/ca-trust/source/anchors/cacert.pem
+ state: absent
- name: Mise à jour de la base de confiance CA
command: /usr/bin/update-ca-trust
+ when: cafile is changed
- name: Installation CA personnel pour applis serveur
copy: