From cc8d08920bfb43eabbb075b42eaad76e6e0be203 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Thu, 17 Aug 2023 23:23:38 +0200
Subject: some more tests with new x509/certifcate roles

---
 dan/sk-testvm.yml | 38 +++++++-------------------------------
 1 file changed, 7 insertions(+), 31 deletions(-)

(limited to 'dan')

diff --git a/dan/sk-testvm.yml b/dan/sk-testvm.yml
index 39835fad..bffb2c9b 100644
--- a/dan/sk-testvm.yml
+++ b/dan/sk-testvm.yml
@@ -11,11 +11,11 @@
 - name: Payload Setup
   hosts: sk-testvm
   vars:
-    acme_client: uacme
+    # acme_client: uacme
     # acme_client: acmetool
-    cert_provider: "{{ acme_client }}"
+    # cert_provider: "{{ acme_client }}"
     # cert_provider: static
-    # cert_provider: selfsigned
+    cert_provider: selfsigned
   roles:
   - role: "x509/{{ cert_provider }}/base"
   - role: nginx/base
@@ -58,20 +58,8 @@
           '/':
             root: /var/www/default
             index: index.html
-      # static_cert_config: "{{ static_cert_config__default }}"
-      # selfsigned_cert_config:
-      #   cert:
-      #     organization_name: "elev8"
-      #     organizational_unit_name: "ansible"
-      #     key_usage:
-      #     - digitalSignature
-      #     - keyAgreement
-      #     key_usage_critical: yes
-      #     extended_key_usage:
-      #     - serverAuth
-      #     extended_key_usage_critical: yes
-      #     create_subject_key_identifier: yes
-      #     not_after: +1000w
+      static_cert_config: "{{ static_cert_config__default }}"
+      selfsigned_cert_config: "{{ selfsigned_cert_config__default }}"
     include_role:
       name: nginx/vhost
 
@@ -108,19 +96,7 @@
           '/':
             root: /var/www/test
             index: index.html
-      # static_cert_config: "{{ static_cert_config__test }}"
-      # selfsigned_cert_config:
-      #   cert:
-      #     organization_name: "spreadspace"
-      #     organizational_unit_name: "ansible"
-      #     key_usage:
-      #     - digitalSignature
-      #     - keyAgreement
-      #     key_usage_critical: yes
-      #     extended_key_usage:
-      #     - serverAuth
-      #     extended_key_usage_critical: yes
-      #     create_subject_key_identifier: yes
-      #     not_after: +100w
+      static_cert_config: "{{ static_cert_config__test }}"
+      selfsigned_cert_config: "{{ selfsigned_cert_config__test }}"
     include_role:
       name: nginx/vhost
-- 
cgit v1.2.3