diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2014-07-07 03:26:50 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:52:34 +0200 |
| commit | f9fa7026603a298c46aea77d753e0a8121e5d71b (patch) | |
| tree | a2b8b5f35d28a8b843b5c25a5ddf516b9eb58ee4 /roles/IMAP/tasks | |
| parent | d198adc93708070fa1325e6d6b5df20f05804e1e (diff) | |
Add ability to add custom OrganizationalUnits in genkeypair.
Also, it's now possible to reuse an existing private key (with -f).
Diffstat (limited to 'roles/IMAP/tasks')
| -rw-r--r-- | roles/IMAP/tasks/imap.yml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/IMAP/tasks/imap.yml b/roles/IMAP/tasks/imap.yml index 71a0cb4..25f876d 100644 --- a/roles/IMAP/tasks/imap.yml +++ b/roles/IMAP/tasks/imap.yml @@ -56,41 +56,41 @@ - unseen - name: Create directory /home/mail/spamspool # There is no possibility for a name clash, since 'spamspool' isn't a # valid domain file: path=/home/mail/spamspool state=directory owner=vmail group=vmail mode=0700 - name: Create directory /etc/dovecot/ssl file: path=/etc/dovecot/ssl state=directory owner=root group=root mode=0755 - name: Generate a private key and a X.509 certificate for Dovecot command: genkeypair.sh x509 --pubkey=/etc/dovecot/ssl/imap.fripost.org.pem --privkey=/etc/dovecot/ssl/imap.fripost.org.key - --dns=imap.fripost.org + --ou=IMAP --cn=imap.fripost.org -t rsa -b 4096 -h sha512 register: r1 changed_when: r1.rc == 0 failed_when: r1.rc > 1 notify: - Restart Dovecot tags: - genkey - name: Fetch Dovecot's X.509 certificate # Ensure we don't fetch private data sudo: False fetch: src=/etc/dovecot/ssl/imap.fripost.org.pem dest=certs/dovecot/ fail_on_missing=yes flat=yes tags: - genkey - name: Configure Dovecot |