diff options
| author | Christian Pointner <equinox@spreadspace.org> | 2023-12-20 13:41:28 +0100 |
|---|---|---|
| committer | Christian Pointner <equinox@spreadspace.org> | 2023-12-20 13:41:28 +0100 |
| commit | 524527ef9da5d64c0f04f70c1f67215967d242a8 (patch) | |
| tree | 0697689dda5ae56ba74ac8551eeab37f446b9c95 /roles/x509/uacme | |
| parent | x509: add new role managed-ca (diff) | |
x509: make ca-certificates accessable for role users
Diffstat (limited to 'roles/x509/uacme')
| -rw-r--r-- | roles/x509/uacme/cert/prepare/tasks/main.yml | 1 | ||||
| -rw-r--r-- | roles/x509/uacme/cert/prepare/templates/updated.sh.j2 | 5 |
2 files changed, 5 insertions, 1 deletions
diff --git a/roles/x509/uacme/cert/prepare/tasks/main.yml b/roles/x509/uacme/cert/prepare/tasks/main.yml index 887f7355..d968db84 100644 --- a/roles/x509/uacme/cert/prepare/tasks/main.yml +++ b/roles/x509/uacme/cert/prepare/tasks/main.yml @@ -94,6 +94,7 @@ x509_certificate_path_cert: "/var/lib/uacme.d/{{ uacme_cert_name }}/crt.pem" x509_certificate_path_chain: "/var/lib/uacme.d/{{ uacme_cert_name }}/chain.pem" x509_certificate_path_fullchain: "/var/lib/uacme.d/{{ uacme_cert_name }}/{{ uacme_cert_name }}-cert.pem" + x509_certificate_path_ca_cert: "" - name: install script to be called when new certificate is generated template: diff --git a/roles/x509/uacme/cert/prepare/templates/updated.sh.j2 b/roles/x509/uacme/cert/prepare/templates/updated.sh.j2 index b6bd20de..78850cfb 100644 --- a/roles/x509/uacme/cert/prepare/templates/updated.sh.j2 +++ b/roles/x509/uacme/cert/prepare/templates/updated.sh.j2 @@ -17,7 +17,10 @@ chgrp "{{ uacme_cert_config.cert.group }}" $BASE_D/{{ uacme_cert_name }}-cert.pe install{% if 'mode' in file %} -m {{ file.mode }}{% endif %}{% if 'owner' in file %} -o {{ file.owner }}{% endif %}{% if 'group' in file %} -g {{ file.group }}{% endif %} /dev/null "{{ file.dest }}.new" {% for src in file.src %} -cat "{{ hostvars[inventory_hostname]['x509_certificate_path_' + src] }}" >> "{{ file.dest }}.new" +{% set src_file = lookup('vars', 'x509_certificate_path_' + src) %} +{% if src_file != "" %} +cat "{{ src_file }}" >> "{{ file.dest }}.new" +{% endif %} {% endfor %} mv "{{ file.dest }}.new" "{{ file.dest }}" {% endfor %} |