From fb0b3914086484d9284426985984e2c1699ba557 Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <elizabeth.hunt@simponic.xyz>
Date: Fri, 5 Jan 2024 16:13:01 -0500
Subject: ldap, internal CA, internal webserver, dns, etc.

---
 roles/ca/tasks/main.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 roles/ca/tasks/main.yml

(limited to 'roles/ca/tasks')

diff --git a/roles/ca/tasks/main.yml b/roles/ca/tasks/main.yml
new file mode 100644
index 0000000..2649686
--- /dev/null
+++ b/roles/ca/tasks/main.yml
@@ -0,0 +1,15 @@
+---
+
+- name: get root CA certificate
+  command: >
+    curl -k -X GET -H "Content-Type:application/json" \
+      "https://{{ step_bootstrap_ca_url }}:{{ step_ca_port }}/root/{{ step_bootstrap_fingerprint }}"
+  register: root_ca_fp
+
+- name: copy to os certificates
+  template:
+    src: "../templates/crt.j2"
+    dest: "/usr/local/share/ca-certificates/{{ step_bootstrap_ca_url }}.crt"
+
+- name: update trusted certs
+  command: "update-ca-certificates"
-- 
cgit v1.2.3-70-g09d2