summaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
Diffstat (limited to 'roles')
-rw-r--r--roles/common/tasks/main.yml23
1 files changed, 23 insertions, 0 deletions
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 4e85d0a..8f28b93 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -43,3 +43,26 @@
- rsync
- screen
- telnet-ssl
+
+# XXX: this is a workaround the CAcert root CAs not being present in
+# Jessie. In stretch, we would merely install the 'ca-cacert' package.
+- name: Create directory /usr/local/share/ca-certificates/CAcert
+ file: path=/usr/local/share/ca-certificates/CAcert
+ state=directory
+ owner=root group=root
+ mode=0755
+ tags:
+ - certs
+
+- name: Copy CAcert root CAs
+ copy: src=certs/CAcert/{{ item }}
+ dest=/usr/local/share/ca-certificates/CAcert/{{ item }}
+ owner=root group=root
+ mode=0644
+ with_items:
+ - root.crt
+ - class3.crt
+ tags:
+ - certs
+ notify:
+ - Update certificate