Skip to content

Commit a26ac6c

Browse files
committed
Add creation of chained.pem and dhparam.pem
1 parent f5baa43 commit a26ac6c

2 files changed

Lines changed: 14 additions & 1 deletion

File tree

.gitignore

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,8 @@ ca.srl
1010
.DS_Store
1111
ansible/roles/hipache/templates/runnable*
1212
enviroments/**/k8/**/configMaps/*cert*
13-
environments/*/secrets/**/*
13+
environments/gamma/secrets/**/*
14+
environments/delta/secrets/**/*
1415
*.retry
1516
*.tfstate*
1617
terraform/credentials.tfvars

ansible/roles/runnable-domain-proxy/tasks/main.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,15 @@
11
---
2+
- name: create chained cert
3+
tags: [ certs ]
4+
shell: |
5+
cat {{ domains_root }}/{{ domain }}/cert.pem > {{ domains_root }}/{{ domain }}/chained.pem
6+
echo "" >> {{ domains_root }}/{{ domain }}/chained.pem # Add newline
7+
cat {{ domains_root }}/{{ domain }}/ca.pem > {{ domains_root }}/{{ domain }}/chained.pem
8+
9+
- name: create dhparam.pem
10+
tags: [ certs ]
11+
command: openssl dhparam -out {{ domains_root }}/{{ domain }}/dhparam.pem 2048
12+
213
- set_fact:
314
ca_data: "{{ lookup('file', '{{ domains_root }}/{{ domain }}/ca.pem') }}"
415
- set_fact:
@@ -8,6 +19,7 @@
819
- set_fact:
920
chained_data: "{{ lookup('file', '{{ domains_root }}/{{ domain }}/chained.pem') }}"
1021
- set_fact:
22+
# NOTE: We currently have no way of generating this file
1123
dhparam_data: "{{ lookup('file', '{{ domains_root }}/{{ domain }}/dhparam.pem') }}"
1224

1325
- name: create configMap folder

0 commit comments

Comments
 (0)