diff options
| -rw-r--r-- | roles/common/tasks/main.yml | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index 4e85d0a..8f28b93 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -43,3 +43,26 @@ - rsync - screen - telnet-ssl + +# XXX: this is a workaround the CAcert root CAs not being present in +# Jessie. In stretch, we would merely install the 'ca-cacert' package. +- name: Create directory /usr/local/share/ca-certificates/CAcert + file: path=/usr/local/share/ca-certificates/CAcert + state=directory + owner=root group=root + mode=0755 + tags: + - certs + +- name: Copy CAcert root CAs + copy: src=certs/CAcert/{{ item }} + dest=/usr/local/share/ca-certificates/CAcert/{{ item }} + owner=root group=root + mode=0644 + with_items: + - root.crt + - class3.crt + tags: + - certs + notify: + - Update certificate |