ca_certificates
Ansible Role: ca-certificates
Description
Ansible role to manage CA certificates in the Linux and Windows system trust store. It's possible to add PEM formatted certificates from the local file system, a already trusted HTTP(s) URL, from raw content.
Installation
ansible-galaxy install arillso.ca_certificates
Requirements
none
Role Variables
ca_certificates_root_directory
Location where the certificates are stored under windows before they are imported into the certificate store of Windows.
ca_certificates_root_directory: '{{ ansible_env.TMP }}'
ca_certificates_packages
Packages to be installed.
ca_certificates_packages:
- ca-certificates
ca_certificates_files
List of CA certificates that are to be added to the certificate store of the system. Each list element is a configuration directory that defines the source (URL, Files or Inline as variable) of the certificate. It must contain a key'name' and one of the following keys in order to use the certificate:
| Option | Comments |
|---|---|
| file | Path to a file on the host running the Ansible playbook. Relative file paths are related to the role's files/ directory. |
| url | URL to a PEM-formatted certificate file |
| content | Certificate inline as PEM-formatted |
| store_name | Optional in Windows. The store name to use when importing. See: Ansible doc |
| store_location | Optional in Windows. See: Ansible doc |
ca_certificates_files: []
Dependencies
None
Example Playbook
- hosts: all
roles:
- arillso.ca_certificates
Author
License
This project is under the MIT License. See the LICENSE file for the full license text.
Copyright
(c) 2020, Arillso
ansible-galaxy install arillso/ansible.ca-certificates