summaryrefslogtreecommitdiff
path: root/roles/ca/tasks
diff options
context:
space:
mode:
authorElizabeth Hunt <elizabeth.hunt@simponic.xyz>2024-01-05 16:13:01 -0500
committerElizabeth Hunt <elizabeth.hunt@simponic.xyz>2024-01-05 16:13:01 -0500
commitfb0b3914086484d9284426985984e2c1699ba557 (patch)
tree963a2288a3b33f389972a78efaf3b6462bbe1925 /roles/ca/tasks
parentb62d5f559b81556a1dd6197c72a0c43ba1744477 (diff)
downloadoldinfra-fb0b3914086484d9284426985984e2c1699ba557.tar.gz
oldinfra-fb0b3914086484d9284426985984e2c1699ba557.zip
ldap, internal CA, internal webserver, dns, etc.
Diffstat (limited to 'roles/ca/tasks')
-rw-r--r--roles/ca/tasks/main.yml15
1 files changed, 15 insertions, 0 deletions
diff --git a/roles/ca/tasks/main.yml b/roles/ca/tasks/main.yml
new file mode 100644
index 0000000..2649686
--- /dev/null
+++ b/roles/ca/tasks/main.yml
@@ -0,0 +1,15 @@
+---
+
+- name: get root CA certificate
+ command: >
+ curl -k -X GET -H "Content-Type:application/json" \
+ "https://{{ step_bootstrap_ca_url }}:{{ step_ca_port }}/root/{{ step_bootstrap_fingerprint }}"
+ register: root_ca_fp
+
+- name: copy to os certificates
+ template:
+ src: "../templates/crt.j2"
+ dest: "/usr/local/share/ca-certificates/{{ step_bootstrap_ca_url }}.crt"
+
+- name: update trusted certs
+ command: "update-ca-certificates"