ISTI-ansible-roles
/
ansible-role-basic-system-setup
4
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

deb wants a .crt extension under ca-certificates

This commit is contained in:
Andrea Dell'Amico 2021-09-30 16:35:46 +02:00
parent 714ac353f9
commit 9ffcccc486
Signed by: adellam
GPG Key ID: 147ABE6CEB9E20FF
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
tasks/trusted_ca.yml
View File

@ -67,7 +67,7 @@
- name: Download the letsencrypt CA files on deb - name: Download the letsencrypt CA files on deb
get_url: get_url:
url: '{{ trusted_ca_letsencrypt_ca_certificates_url }}/{{ item.ca }}' url: '{{ trusted_ca_letsencrypt_ca_certificates_url }}/{{ item.ca }}'
dest: '{{ trusted_ca_deb_path }}/{{ item.ca }}' dest: '{{ trusted_ca_deb_path }}/{{ item.ca }}.crt'
owner: root owner: root
group: root group: root
mode: 0444 mode: 0444
@ -85,6 +85,13 @@
loop: '{{ expired_ca_letsencrypt_ca_files }}' loop: '{{ expired_ca_letsencrypt_ca_files }}'
register: letsencrypt_ca_files_removal register: letsencrypt_ca_files_removal
- name: Ensure that the expired CA files are not present
file:
dest: '{{ trusted_ca_deb_path }}/{{ item }}.crt'
state: absent
loop: '{{ expired_ca_letsencrypt_ca_files }}'
register: letsencrypt_ca_files_removal
- name: Ensure that the expired CA files are not present - name: Ensure that the expired CA files are not present
file: file:
dest: '{{ trusted_ca_deb_path }}/{{ item }}' dest: '{{ trusted_ca_deb_path }}/{{ item }}'