Skip to content
Snippets Groups Projects
buildClientCert.yml 1.08 KiB
Newer Older
  delegate_to: "{{ server }}"
  name: "Check if certificate exist"
  register: cert
  stat: "path=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt"
  delegate_to: "{{ server }}"
  name: "Creating Client certificate"
  shell: " cd /etc/easy-rsa/2.0; source ./vars; export EASY_RSA=\"${EASY_RSA:-.}\"; \"$EASY_RSA\"/pkitool --csr {{ inventory_hostname }} ;\"$EASY_RSA\"/pkitool --sign {{ inventory_hostname }}"
  when: "cert.stat.exists  == false"
- 
  delegate_to: "{{ server }}"
Jupiter Hu's avatar
Jupiter Hu committed
  fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.crt dest=/tmp/certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
  name: "Copy the Client Certificate to the master node"
- 
  delegate_to: "{{ server }}"
Jupiter Hu's avatar
Jupiter Hu committed
  fetch: "src=/etc/easy-rsa/2.0/keys/{{ inventory_hostname }}.key dest=/tmp/certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
  name: "Copy the Client Certificate to the master node"
- 
  delegate_to: "{{ server }}"
Jupiter Hu's avatar
Jupiter Hu committed
  fetch: "src=/etc/easy-rsa/2.0/keys/ca.crt dest=/tmp/certDir/ fail_on_missing=yes validate_md5=yes flat=yes"
  name: "Copy the Client Certificate to the master node"