From fcc307aafeb8438de12f339af0f5c83ab647c8a9 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 10 Jul 2014 03:45:25 +0200
Subject: Hash certs using a lookup in the template instead of add a new task.

---
 roles/out/tasks/main.yml | 10 ----------
 1 file changed, 10 deletions(-)

(limited to 'roles/out/tasks')

diff --git a/roles/out/tasks/main.yml b/roles/out/tasks/main.yml
index 791bfa3..2a9cf71 100644
--- a/roles/out/tasks/main.yml
+++ b/roles/out/tasks/main.yml
@@ -9,16 +9,6 @@
   notify:
     - Reload Postfix
 
-- name: Build the Postfix relay clientcerts map
-  sudo: False
-  # smtpd_tls_fingerprint_digest MUST be sha256!
-  local_action: shell openssl x509 -in certs/postfix/{{ item }}.pem -noout -fingerprint -sha256 | sed -nr 's/^.*=(.*)/\1 {{ item }}/p'
-  with_items: groups.all | difference([inventory_hostname]) | sort
-  register: relay_clientcerts
-  changed_when: False
-  tags:
-    - tls_policy
-
 - name: Copy the Postfix relay clientcerts map
   template: src=etc/postfix/relay_clientcerts.j2
             dest=/etc/postfix-{{ postfix_instance[inst].name }}/relay_clientcerts
-- 
cgit v1.2.3