infra_public/roles/stable/openssl_certificates/tasks/authority_webserver.yml

---
- name: Certification Authority - Webserver - Create static_service root
  file:
    path: /home/antennine/ca/certs
    state: directory

- name: Certification Authority - Webserver - Copy certificates to webserver dir
  copy:
    src: /etc/certs/{{ ca_cert_name }}.pem
    dest: /home/antennine/ca/certs/
    remote_src: true

- name: Certification Authority - Webserver - Create sha1 fingerprint
  shell: openssl x509 -sha1 -in {{ ca_cert_dir }}/{{ ca_cert_name }}.pem -noout -fingerprint
  register: ca_cert_sha1

# - name: Certification Authority - Webserver - Convert certificate in format DER
#   shell: openssl x509 -in {{ ca_cert_name }}.pem -inform pem -out {{ ca_cert_name }}.der -outform der
#   register: ca_cert_der

# - name: Certification Authority - Webserver - Convert certificate in format TXT
#   shell:
#   register: ca_cert_txt

# - name: Certification Authority - Webserver - Create certificate revocation list CRL
#   shell:
#   register: ca_cert_crl

- name: Certification Authority - Webserver - Generate index.html
  template:
    src: authority.html.j2
    dest: "/home/antennine/ca/index.html"

- name: Certification Authority - Webserver - Copy files
  copy:
    src: ./ca/
    dest: /home/antennine/ca/

- name: Certification Authority - Webserver - Webserver
  include_role:
    name: ../roles/stable/nginx
    tasks_from: main