- name: Installation de mon autorité de certification
  copy:
    src: root.pem
    dest: /etc/pki/ca-trust/source/anchors/root.pem
    mode: 0444
  register: cafile
  tags: firstinstall

- name: Désinstallation de l'autorité de certification CACert
  file:
    path: /etc/pki/ca-trust/source/anchors/cacert.pem
    state: absent

- name: Mise à jour de la base de confiance CA
  command: /usr/bin/update-ca-trust
  when: cafile is changed
  tags: firstinstall

- name: Installation CA personnel pour applis serveur
  copy:
    src: root.pem
    dest: /etc/pki/tls/certs/mon-ca.crt
    mode: 0444
  tags: keys

- name: Mise à jour de la CRL
  copy:
    src: crt-crl.pem
    dest: /etc/pki/tls/certs/crt-crl.pem
    mode: 0444
  tags: keys