Add an ansible module 'fetch_cmd' to fetch the output of a remote command locally.

And use this to fetch all X.509 leaf certificates.

1 files changed, 3 insertions, 4 deletions

diff --git a/roles/common-LDAP/tasks/main.yml b/roles/common-LDAP/tasks/main.yml
index 960189b..6ad561e 100644
--- a/roles/common-LDAP/tasks/main.yml
+++ b/roles/common-LDAP/tasks/main.yml
@@ -57,10 +57,9 @@
 - name: Fetch slapd's X.509 certificate
   # Ensure we don't fetch private data
   become: False
-  fetch: src=/etc/ldap/ssl/{{ item.name }}.pem
-         dest=certs/ldap/
-         fail_on_missing=yes
-         flat=yes
+  fetch_cmd: cmd="openssl x509"
+             stdin=/etc/ldap/ssl/{{ item.name }}.pem
+             dest=certs/ldap/{{ item.name }}.pem
   with_items:
     - { group: 'LDAP-provider', name: ldap.fripost.org }
     - { group: 'MX',            name: mx               }