From 524527ef9da5d64c0f04f70c1f67215967d242a8 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Wed, 20 Dec 2023 13:41:28 +0100 Subject: x509: make ca-certificates accessable for role users --- roles/x509/static-ca/cert/prepare/tasks/main.yml | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'roles/x509/static-ca/cert/prepare/tasks') diff --git a/roles/x509/static-ca/cert/prepare/tasks/main.yml b/roles/x509/static-ca/cert/prepare/tasks/main.yml index 538bb58d..9a8d1bde 100644 --- a/roles/x509/static-ca/cert/prepare/tasks/main.yml +++ b/roles/x509/static-ca/cert/prepare/tasks/main.yml @@ -84,12 +84,18 @@ - restart services for x509 certificates register: _static_ca_cert_ +- name: install CA certificate + copy: + content: "{{ static_ca_cert_config.ca.cert_content }}" + dest: "{{ static_ca_cert_path }}/{{ static_ca_cert_name }}-ca-crt.pem" + - name: export paths to certificate files set_fact: x509_certificate_path_key: "{{ static_ca_cert_path }}/{{ static_ca_cert_name }}-key.pem" x509_certificate_path_cert: "{{ static_ca_cert_path }}/{{ static_ca_cert_name }}-crt.pem" x509_certificate_path_chain: "" x509_certificate_path_fullchain: "{{ static_ca_cert_path }}/{{ static_ca_cert_name }}-crt.pem" + x509_certificate_path_ca_cert: "{{ static_ca_cert_path }}/{{ static_ca_cert_name }}-ca-crt.pem" - name: generate custom post-renewal script when: x509_certificate_renewal is defined -- cgit v1.2.3