Cacerts Import

This process allows you to import a certificate into the cacerts certificate authority.

Role Variables

The only variable you need is cacerts. This can point to a certificate that is either stored locally or available remotely.

For a local certificate, you will need:

• The folder where the certificate is located
• The name of the certificate
• An alias for the certificate

For a remote certificate, you need:

• The name of the certificate
• An alias for the certificate
• The remote server to get the certificate from
• The port to access it (default is 443)

Here’s a sample configuration:

# Make sure you provide the java_home variable.

cacerts_remote_cert_location: /etc/ssl/certs
cacerts_remote_cert_owner: root
cacerts_remote_cert_group: root

cacerts_store_pass: changeit

# Example setup for cacerts:
#   - location: local
#     name: certname.pem
#     folder: path
#     alias: certalias
#   - location: remote
#     name: certname.pem
#     alias: 
#     server: 
#     port: port

Example Playbook

Here's how you can set up a playbook:

- hosts: yourhostname
  become: yes
  vars:
    cacerts:
      - name: Identity.pem
        alias: Identity
        location: remote
        server: identity.test.school.edu
        port: "443"
  roles:
    - ChristopherDavenport.cacerts-import