- name: Installation de mon autorité de certification
  copy: src=root.pem dest=/etc/pki/ca-trust/source/anchors/root.pem mode=444

- name: Installation de l'autorité de certification CACert
  copy: src=cacert.pem dest=/etc/pki/ca-trust/source/anchors/cacert.pem mode=444

- name: Mise à jour de la base de confiance CA
  command: /usr/bin/update-ca-trust

- name: Installation CA personnel pour applis serveur
  copy:
    src: root.pem
    dest: /etc/pki/tls/certs/mon-ca.crt
    mode: 0444

- name: Installation et renouvellement de la CRL
  copy:
    src: crt-crl.pem
    dest: /etc/pki/tls/certs/crt-crl.pem
    mode: 0444