ca-certificates

This role handles ca-certificates on Debian and RedHat operating systems, using the built-in certificate management tools. These tools typically manage the OpenJDK cacerts file as well, if the appropriate package is installed.

Role Variables

• ca_certificates_handler: command to run if there are changes (varies by OS)
• ca_certificates_local_dir: the directory where CA Certificates are copied, set in variables
• ca_certificates_trusted: A list of certificate names and their corresponding PEM files to copy to ca_certificates_local_dir

Example Playbook

Here’s an example of how to use this role (with variables passed in as parameters):

- hosts: servers
  roles:
     - { ca_certificates }

License

GPLv3

Author Information

GitHub Repository

Contributors

Thank you!

• Sean O'Keeffe Added ability to fetch CA cert #4
• Emii Khaos Fixed update handler name to match the one defined in default vars #1