mizhka / ansible.ca-certificates

Ansible role to manage CA certificates in the Linux and Windows system trust store.

Ansible Role: ca-certificates

Description

Ansible role to manage CA certificates in the Linux and Windows system trust store. It's possible to add PEM formatted certificates from the local file system, a already trusted HTTP(s) URL, from raw content.

Installation

ansible-galaxy install arillso.ca_certificates

Requirements

none

Role Variables

ca_certificates_root_directory

Location where the certificates are stored under windows before they are imported into the certificate store of Windows.

ca_certificates_root_directory: '{{ ansible_env.TMP }}'

ca_certificates_packages

Packages to be installed.

ca_certificates_packages:
  - ca-certificates

ca_certificates_files

List of CA certificates that are to be added to the certificate store of the system. Each list element is a configuration directory that defines the source (URL, Files or Inline as variable) of the certificate. It must contain a key'name' and one of the following keys in order to use the certificate:

Option	Comments
file	Path to a file on the host running the Ansible playbook. Relative file paths are related to the role's files/ directory.
url	URL to a PEM-formatted certificate file
content	Certificate inline as PEM-formatted
store_name	Optional in Windows. The store name to use when importing. See: Ansible doc
store_location	Optional in Windows. See: Ansible doc

ca_certificates_files: []

Dependencies

None

Example Playbook

- hosts: all
  roles:
    - arillso.ca_certificates

Author

• Simon Bärlocher

License

This project is under the MIT License. See the LICENSE file for the full license text.

Copyright

(c) 2020, Arillso