diff options
Diffstat (limited to 'roles/ca')
| -rw-r--r-- | roles/ca/tasks/main.yml | 15 | ||||
| -rw-r--r-- | roles/ca/templates/crt.j2 | 1 |
2 files changed, 16 insertions, 0 deletions
diff --git a/roles/ca/tasks/main.yml b/roles/ca/tasks/main.yml new file mode 100644 index 0000000..2649686 --- /dev/null +++ b/roles/ca/tasks/main.yml @@ -0,0 +1,15 @@ +--- + +- name: get root CA certificate + command: > + curl -k -X GET -H "Content-Type:application/json" \ + "https://{{ step_bootstrap_ca_url }}:{{ step_ca_port }}/root/{{ step_bootstrap_fingerprint }}" + register: root_ca_fp + +- name: copy to os certificates + template: + src: "../templates/crt.j2" + dest: "/usr/local/share/ca-certificates/{{ step_bootstrap_ca_url }}.crt" + +- name: update trusted certs + command: "update-ca-certificates" diff --git a/roles/ca/templates/crt.j2 b/roles/ca/templates/crt.j2 new file mode 100644 index 0000000..f775757 --- /dev/null +++ b/roles/ca/templates/crt.j2 @@ -0,0 +1 @@ +{{ (root_ca_fp.stdout | from_json).ca }} |