From 0372fec0e330f99e69cd643a91250e2fa6b57db5 Mon Sep 17 00:00:00 2001 From: Thomas Woerner Date: Wed, 3 Jun 2020 12:16:54 +0200 Subject: [PATCH] ca-less: No pre-generated certificates, generate them for each run The certificates should not be pre-generated as they will expire at some point. Simply generate them for each test run using the domain used in the test. Copy the certificate files each time into the test server after removing the old ones. --- .../certificates/dirsrv/ipaserver/cert.p12 | Bin 5580 -> 0 bytes .../certificates/dirsrv/ipaserver/cert.pem | 30 -------- .../certificates/dirsrv/ipaserver/private.key | 52 ------------- .../certificates/dirsrv/ipaserver/request.csr | 27 ------- .../certificates/httpd/ipaserver/cert.p12 | Bin 5586 -> 0 bytes .../certificates/httpd/ipaserver/cert.pem | 30 -------- .../certificates/httpd/ipaserver/private.key | 52 ------------- .../certificates/httpd/ipaserver/request.csr | 27 ------- .../certificates/pkinit/ipaserver/cert.p12 | Bin 5780 -> 0 bytes .../certificates/pkinit/ipaserver/cert.pem | 34 --------- .../certificates/pkinit/ipaserver/private.key | 52 ------------- .../certificates/pkinit/ipaserver/request.csr | 27 ------- tests/ca-less/certificates/root-ca/cert.pem | 31 -------- tests/ca-less/certificates/root-ca/cert.srl | 1 - .../ca-less/certificates/root-ca/private.key | 51 ------------- tests/ca-less/generate-certificates.sh | 69 ++++++++---------- tests/ca-less/install_server_without_ca.yml | 49 +++++++++++-- 17 files changed, 74 insertions(+), 458 deletions(-) delete mode 100644 tests/ca-less/certificates/dirsrv/ipaserver/cert.p12 delete mode 100644 tests/ca-less/certificates/dirsrv/ipaserver/cert.pem delete mode 100644 tests/ca-less/certificates/dirsrv/ipaserver/private.key delete mode 100644 tests/ca-less/certificates/dirsrv/ipaserver/request.csr delete mode 100644 tests/ca-less/certificates/httpd/ipaserver/cert.p12 delete mode 100644 tests/ca-less/certificates/httpd/ipaserver/cert.pem delete mode 100644 tests/ca-less/certificates/httpd/ipaserver/private.key delete mode 100644 tests/ca-less/certificates/httpd/ipaserver/request.csr delete mode 100644 tests/ca-less/certificates/pkinit/ipaserver/cert.p12 delete mode 100644 tests/ca-less/certificates/pkinit/ipaserver/cert.pem delete mode 100644 tests/ca-less/certificates/pkinit/ipaserver/private.key delete mode 100644 tests/ca-less/certificates/pkinit/ipaserver/request.csr delete mode 100644 tests/ca-less/certificates/root-ca/cert.pem delete mode 100644 tests/ca-less/certificates/root-ca/cert.srl delete mode 100644 tests/ca-less/certificates/root-ca/private.key diff --git a/tests/ca-less/certificates/dirsrv/ipaserver/cert.p12 b/tests/ca-less/certificates/dirsrv/ipaserver/cert.p12 deleted file mode 100644 index 80d4173c0944d7aac1fece713d9a0f883466a421..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 5580 zcmY+HWmFUZ*R6-{p}P?fq=xS9Zs`UQ5a|x-7+^?Aff>3%N{||)J4ZsgOHxwe`mS~F zeZTL=Ugxa6&pE%J1BxIWMn*ybMUX^n4fH@dxF0KXOWRH0bvn1GCQRz6`6;t z@ii2M96ZaJ4v`R6S&wcMSLUUK*Af=n={&A9duJ5e!$l?A%MtS(^kLGn+3)IA&?v^1 z0~w&J>n+SZJp>i1c=y%#C{N+6v~+Pzo72`3cOURos?c5coZnP2d}$!qLY?N*B2B8y zSyT|}V10*QoW$`s&)ArV2>0P4$pbtIH#{uTn{fY4J$}%L8@$d3;)IK`IDNu8;xz=v z&<;HNUq9PI6HhEYo`(*Yw#+6cactp8u^m|5%HJ~}p;IqhMpe0u6_+jx;gk+_=iWsm zU?Vv@{8Br);OmP12v4^tJH)|`?hYK?2uz`RtF0>U;Y+W z>enkhyY)zGTlNo(-OfD_KJFM8Tia z65v`*a!F?0TRmg?Vu50_$@&`RK!@sA2*zLakw;u1htzG2rH6ZqkeWm{$`j<--yJeE zlHUEc*OxSzf7G_t&>y(iJ3?Niq|wHFIp$m?-zZmMb3*<68hgu)OJ%f1w@@6csMa%y z6!N=x!L84V=$*Athxv_&2ED*=W^6HhAQA_fXMb}Y3s5)O0Uat`A)XD)!DlBLT7GA^ zJGq=Iwks`0NN>^mou=thP!TmRxG0Oe}g6Up%kp zd(=Dc!}#20XkLy{rjz6Q1Y~Hu+>_@trB>5m6aDSo4p?URBkZg? zdB=&SR!s;L&CJ0!W>%sXnZDLZZ)4{Bv=mo~W!z-0yM%w%7QYZ}fX3+oc_x9?5&?3} zZ_^ie7V-BvAToNQ~w7`~6ieDH{&!G9uq}w9w1;G=`+;8k%IP#N1 z-*9&`5{S;P-A29NFPoddXrKLZebkGoaoJAT!4s6gO4+edO7H@P#@pqjMknb2w0s^W z(kn~$=FPVHL*8AEC#~HLnb0(S9fgy3z}_qv)!dg`V3ZG`=I0<_LL;s)Y*u z->E(*H9By;w5T4K))-EFYgjI^PCS?=b>f#dVss`i!p&P^OA-!smpVnNR6~Fa@O4>b zae;diRpYlEtCrq~#EI8iGA_y*FeSNwiDX|ohYgm}#$CC*Ui&PMb$k3*qFXT{hSh6! zhf`VOo52%?*IYB?r(LLSoXke5xHt3S>=cXs$lBSS_?GV~NLGHe1d_CdUs<~Wk7fC# zu;1Q*MoaoX8w`UN)W6&^`jbGoM4K7XK_gE( zhMc`)KV9OY1F1_zw+YBgHB4I@x?KZSL2HSS?upN#PuUn99nii+H$}>dv9mdroY&$lU*62l9x>FmO!D>z=l%juB1Ro{qAI>wO?{Eotv zvWMiez3k^hTL3v~HRhU)!vxH~2}It6u+kSoq*8w;?ghq%?$itmQsI2;4$~l*Q+r3k?BBm0m^}a|72{hzh>+$&{8b zarc6VF2;M8Z7!(WJWI*x7xXKMut)~n~<> za!VnSgJ zR~Ht)Xw}n0yK+LK1?dra?2R;!hW&aw9{g9pR5BgSSCwI>28h{YGsjjSzLXGsXttpCjW`n1F?<}!ckm)S+$4<3J(@Y zD|_c#daTg*of0dEuQ8c&i0kG=)4Z8PJ*=y$4h;gSx&)`#z+cSN_(hgb?)ZIun*!_W zB#7*7uux&_Ig9B#5JSIK4yqx&O zx9$$=;Cyq`3_y>Yng6yk&Yz*)zv`r)q9y>glzLk4WI|8l{TAK_W2x;o3XTkD$7L>@ z2jMFpiE!t{#c5<~ zD$yiINCXaM$I8F)D|AlhJIA(HD4APD1g<)r!1=uJUID2$&*wI~K}`*^w_MnXA`%Zn zzlTX8!?`&>aQ&!0SK1u0LBH3?9kB~qjM@{g=9O2auh;VwCvzq+4rb$Qa4@B&tB|s! z@5Lg;=6)YhFI?*^97F4uw^==d<0`)cBb$4E`*FO=ZA0YS2j18ED>u%jKHW?}DdO1l z$2JIeqUquqG2%!n^;RLe3S;?zcpX_;Bti5O+uf7I4 z@smEp%%dSZn2Tk`80WdpB#~)W`76b2#Ks6E@XIlY(zKyWp+3stSSon7{^g>Jzd;ooPN?KKCh{<4b4 zr?xqPLg||r*_gl>RN-)Iq2R4YdgwvP;AXlqx~?MT+^FDErKu{PlMl;kxWAhIBp@yq z5;t>}o6@mbw5B^Vnm_lT4eNV18zGf+u0{#}LSet@2{zj+{_JUWp7fTxRXoKTmH_v59CbEij3c+M?`@!9u|@XYqsjFKH3zpyXI&6q?58culj2CZgu zd#QGAHn-SzBpAJG%kVsjWo_vE&^hluhsfI%yEx+DWADOdgO2c_&m{{qXHzyANb?j) zm^mZthwi%KVT-jJ>PmD#WJwgxJ{)B+wD^dyvYBPjDO-@}Yqx#2H3+8k$tccW57shr z4AuckgWn>CEC#tOzewiICpjFlIEqWvtbc4a^90`xQhJ(t(X|zITy4@Re!VAbP+_78 zFDep#U#MOGGjCkBYNzGPDl+DQ?l6Jr;OiMGiPY`qgoU(vE%`0r$f0nP7ZqT2?wE-A zSBDUBwk?;g<`mnO78;%C+Xr>Q1X1cA%Q(}Xeoan!@$7c8#!Rmbe>{h>TYHm#7Yxc= z9DMt2A$xwL^TUImECi+qRosAo9Jgjo@N`&F9 z{!A#P4sduv@z!ayafADknEiybpaRW{?3vkR3@VdU@-P&D7zZFyzU`B^Gk=>1a~xqUe;H_OgzkQ~g_iFXxzJ zBPxenn7&8**>E4@v>Zj3yW7kxBKZAy9cyj+yGy)u7IC3)S+G)UWbt5Pj8No4%)~DI z54M12@H#trog?#NF-!OYY8<13-QmM`KJkVod1X4*ht9#!jJz<=l@0J zDF31I@3?icnG?Ep|Dp1K>naYKr-m;`s3ic^w^i+ArYV2#rw*a6&Rq%US?WVfcNO9) z_fZ7kpmYyC<~&g$>B{`5VGISyR}6-^BDcHin(lQAmP+Tijq%Uu{vHuIVeNlhiNR)+ z3RZ_Fd-r1Xcxqc0|G85D4THAQwMAfj57WewB9o^^&Ht8I?CWLH75Ri&?48a_H7>QR2 z6WLE+GHJROHDKRqWsS$NjMqp|@s5 z$zky`t$_M9|7imJ>da%kdWv}Z!J9MMmL!p6 zFx0IRniIsN!e(B!fW@w%wCwx}uSeib@0W=hExPT7EmjYEgy9I;kF1xk^Zh#8* zo;N(~(+Z1Nj^g8XZ9+By)n}57iK+mdtCGq#$US*DnYfSHPTc&42sSm0wKeaCaO9cw z-|OQt0jK1`+OXS|`m-qbT-H^LQ>CSI!bV*ytiR<~7(^{bbJJ8@=*hOiFl}L2UJ4LY za}h$lx^mFb!??UTn+l`JWY)=X*2^&6s6`>z7FIbEu$cCr7>S*?}Z|SSGNTsV1vseK*6*v2kJPAw9(p@wVW8XjVg?yqUYB zO?Kxe@vJmPipe_++00EKajW2UvP{xXNx;XuvRP!2z$-k54U4sV zqz&vXpN%2G{f+KYbb;KzAEGdRsu*VmB6u-wshp85Rjp6F^f?tvi*4H>pdp)I!x?%% z!N0#o4DO2JLNUk1joP&I@~YrA{UKUGJ9XNAgDq!KN36Wl7(l=IjV7|dvS7ia7y7rD zA%fe~!oIQhD*GkL#G)9Egj{!VFRZeB-~p|^!6HIrOxsh!WIBwvMs8=95dxfj!A_E*mJ^8a9Y8$5W;b^i<=k6@b`=`9r1Kf)4%IuCL61G1j znxt26|MpTae5OM>5SeL@vKgpWCz*V_%NN`2P?k~V^A)R>wU1hS%2v8EcyIHb zHoaF>JTb4PGg8-{5UQ9eH}rKpJz#f=;EwB{Nxpbpq2nSq^^i|aay^LW1G^bp>DIk7 z3VVA+iYiS(TY7YYcg^RNuTk~kkLtr|bt3ExAFiT!ejRFQmAV>QIaJUzNa|F-i&}%R z=$MUlj31`jEvU?kx~eMTJj{k>e|AZHjAd3dmvHAdsdt`KQAnsDqGfBmO#ajL14C(e zLAG4lE*RqJ!c+^Kl{i1Pl?Y=X$szleiUh^(MxPeY_|PEi;9CER2Uv={HmG}rXk8=O5R@x zWY(!3?yY1X4=xZk zs93p~<)-c<6N5Bkh8BU?DYrX;v1h zyrJ@*zfAO`$7&*cJN;^}ja*$1MPz>nh@PQc-1U01 z^`j<7CN#B8jWH|M{_-+J@xV;t4!>^9U3q2ik`r$;Cd(i*ODqLYoR`q%*Q4=`_DaJR+1G`Y;=t|q4wzk z)Shz+0=rP_m_5pW^<6rs>n(-cUTaLr!V24){v*w^b+sVYn3ut{`evAsmmH=Wf+=}Q zJ%KCnwcioX&p)!kq$ADFEpVIEjKIz&iNsY?o99C&T9~qd!r>&3*s0}nN@t7x=;wFy z;m=LQ5^bXN%VAqvKgO{rr1<#6-^{@H@05LWoiIRg={L`vd-UO-n?kAU$05q z>dRayw}c5g&dt0XyR~Osg5IoC^FL#7wev_9qhMCLAT!Ye2>QF^M7)Xh`pwyP2VgEs zBgo9oS7(;s<~aG`aV-K>0t*%9G#PuRqbE{9?(V?1x(~EzqgUtcBWnURmzbJ4+EGDF zri4oVwI1C&F0|ikwHNxH3;R=Z=LTyxFu+2wYIfT`+tmHzwZ*A%-MeVX(PNW!f7LKq zd`N`tCGqvg#AtV`M7tCc*ut{?3N<3sZh|?#P>s13C-bY(F}>hnNeA0oK3rBkxhm-Z zlrmnx%?1+8qemK*2`l{$b&C2H^^_zpqrlGk3mk{daz8*3#Vy>4g)A)nPPq5k!hJaI zm{$Yz>i^Rj7AY?oDv4u%nqEZqL7Q(IleHBA;AIn=a00~g-ysrS3OX`?J-`Xz3Gn(S zUjP@t4&d;w^9J#P7(rO*XdFNkWGXZODv1QN8EJA-)YSdD%6-s!>nL^|c!i1yfqGf@ Lhun?+2j>0{h$ep((4I*yQd{m%S; zZ_Lil&OD#p{rlmMAe}@(M&*wnO+&}x{H*%<77rN%85}_x4TvBO|A#;EN8o(w)0(Z;#J3+P@QRQLSz}j;gCUdo_stliAO_P|^%UE)&t4Q%Taqbhk za|h1ahuU(kTuT0)H`{B<)c$@bS_FR51SDe(D^kcpB*aF6bEd4J6<^14&8G9kK1l7JLYX~*E}3>CV5Q&J{}R2 zq8FN7@1o&KfjjN47ZoAB19g)o!W|2Rx|hlv-w=R}lcEOQP8&gc- zVio=^Z)c(!t@E9u6eANwNE!YKCM_=iSq?uShfM?67nUp$pXUB5D_k|Pj%DpPw)q*Q z?S7^s3@&<^dzG|eu0#7Ue0lO<05^E+m;6;DiHOnnHuzcp(TuNrz-VCismcE?vhzU} zUD9K?1EhXL!UCx(q^m$T`C^(swY=ZzRZu?S<>QRA`Ow|n5}m;oI~~h3Ml;y{>0KZk zCBpYkbh>1&yX~d475-9*8iTX8y~_|E0loAnEjPava$On8+`;(EBOlqQ6VKInrvmvS zca1{RA?|*Me;}m?Z~c@!zz5<@dF?$SjHx|gKFe45u2}JfhJ_mdYG$*E`8}2FtnI-1 zfH#gQr(Zl(Czdr=KMBE8E5_? zry%;<9KOoD=sppOK4zP5%=jDd6q2Z%1_!nD%m52K5W~tm^L3J(ZIrr#UCT1o{jN0b zTQcuH#<<>>xs>>~k#;Ije>w~?Yk2j&9o3Gq=D`BtY?&MxA3;_<6wu5u1lcl}(a)>f z6dh0$7lVIA^2j{#=_63KA3|w3t|$DvL%S;I$ygeOg}E{>t+-Lrb-S>JPA;BKue5=Q zI;_6=VseA1!6XY4wH;yTTELtP8h`B24duHeDwI>^xnt1Ck^a8t%|2ajmbd=cC6Hy^ThYvUO#Z`R#t z(i!zDh}iBR5N%eb28GjkHfJY$IP+9xef^$!3R>OP|JI{zlQ7l${V#8^>j*tsK5EB; zt2bi5hJ$CynFpL!9z?l2!rrPO7UfDAi=XxNT2gub^;O4Idr)Ygq>~#w9W@=p-|y%n z+YR0P#7aUMc~2YoFo-7rf)aOQYI&{0WzQ5<8pyEGp z?YpqPM%C4~=~)U$t-$|kuJy|z$LCV989TL{gFis%oz|U>_rN(F+$;93DDiFsa9n{l zol|PCL0H`U(o|KMmlF_;QbW#uhRe{KO9Z+iSlLcbbYfN1_vZvJV{6d1tY>E0lcscg zmRelBTXZRBK?Q&puiD4g^(<4qY+M{~xe+lOMQ%i^YQKxy4-N>tWisQn?y3RhRom5q z6*N&bSFzkp=ZDDqwXCJV25=+fpBDOAp{zHd4aR55Wi&t-Sbk#Nf!*BMwx}*|{T!Fi zGcnJXs9lqGb9G8`&n0#Fqw%frM|bcTj9_B?qS=z5RvY`?7Qo#gI>WUYRxQD0UhwUxa6h-+ooX z)8p%K|7q>L6?{}iDngn zvkWF#d!v>4g^r1juS#!4V(GlOHC;2vg)L3m7iq+F^2z>MGQ!NN(e9HvBp+o5BWDV{p${m&JX{^~aho(stLmc7l4cKrs}5Z4A5g`R>j z8J;(CK|kuKVhH#*L5F=4YSc6GN7nTO9!7Dzo?Hv1MYx2rb=671jqS_uJw-rLr4mCa z?#YZzMu?sKe&5gIybb*iKDLZ47x4*(iuA>>{($ZNpq{lip~9S@OWl-Y7Q**cCftG~ zSTYh3@0Ds6ldZLm;_ie%?o9u8NjB!WuqZK36+ z7ldcd9Xx6bEDYadYbkjf&bC)rZa%VFN!@r~89Yz*W0x5SsS*!m0{Y;&+TE-moLY>&!>s_jN>{XWE+3RC?N`n-2av|!%`Z1|nUd%K!Z z)dq2Eq-n(zyZJ~(8T4gq!UBM{rD@@n&Z^P__!UlUO-|@P-bVcT4jMH(akS!>67%vt zwf0N>=1GwelC$vIvtvR!xzE{EMJ89V=zuko=PzkyVSAN+hX!iq$|V@iG+zSN-L{#3 z(RV2A!lfv~il#_bJ5k_8uQJ#&%i076yjgtE;V3I+HFe@@URTwmqP`(m71OyF3a(=c za^lT_ADAFb^fE3rZ_xKOKbTw5IRUj&o`2LADr2Y~7+G@2ONf(|6|GvO@zi!PRM=d7 z$|KH@rzBZZKB3cNRq=QO8SuIke`oVK#}CU&5dLjmUR|~29$hGI;jmT^1{Ryt^0(>} zqc|p-&Hr<`C8k7AfL6CxudlTv%@ZEpo~TXY(l>YLrz2H9^nGHmmwq7yop&GIyDrUR zYlLhHFQC=T13BN46F8^*q&Lwt_lqvITQuY}?Y>)5qYF7sobbM3+89TQ?5tWF06p(O zWC4;z==Csv!G-L?IqlY1l*)tRF02TVluI-0SJV%}iKO*16g&&>=L5X%c1J~nBIEXm ze&V+jkcw%;@Sx!b*8yNixHJzI8c1QPI`!3z5Y%QpN4~fIo6b*S7M5k)8lN!ZWmbuO z^S!5q&V!7w!l=XFk36vVrW=TnsH-sZ6k5@#gw0&pYz*oE0G5bZnkhpkm|Nk$vw|8}dKA-+f8B`P0>fwzCW; zuGzh*iE;6~uiz@t(G%JUh=*WN)q_bqz^oC_i9%JJr=y(u3w! zBII@q!{#|%n)xHJPXCv1gCnrufC#L$e|YI%&!OY|fBnWrM)?=|{excr$I4OvW98JS zm>7O5&-nkb@_*;L4X7YJ(?Bun=1NYdGLIX1pDHw-6`V7-mf5UYe}Yk=E2l1Y(v&!KgNg~du$Fja?Zrr{B_xg_DyIDeP3nFn;c9!i6r0&?C-LUJ=9yYID zjyA6zJ^qYSP}Ctn7mqdfs(f_AcdzPlO5uJIrjM%>Idv6Wx3`Rd%6)S&zoV|Lsz!{}V+ zMdASD?3XLd2 zxS(batzkVBhLIG%uY!A*lvW<_hDBl$ujZ{93H~O#sh0}Maj61MTx8I$T>RUYmiVig zo)QaFX+p}8lV)WVZ-Z9i6o*T{3{oOXBDdPLB2_o!5Mjn*Nd}wFM&st{Oa#J)fvc5c zvDqB??ZJ*&^_uEtu%__x<&%u>C{{_dbLxAVMEkp!125g0-MbRa>6B+|RwRu>f`dDR zKL&^vUaMQ^vUvAt{01u@&}5Ht+2WUPq&Aa&nezznoPxk*XmTkVQND$t6bjTfjEb3K zjeIQZOzIi)1%Y02AJ=WS@RUafe+$56kTWt2357ZN_z3=NUiQ%;m%tM-wZvF5h;DOA zsLnu@`@b;QZ9Y%}bPCp>^KbuR#Q24rIdPXH>ww5HwC`gj#?_S40(XtQH>k)hcMvAn zP`?D*+J`Y=*G&xetEqwq4~k^hD&e8594ia3wk)agpWY&?+cnaavHL0o?fzk(c0Zzv_{ zZ`%%ZE?4QJZFgF|;gbz@FHATfcAcdEbCJP3N%287n*I?+MDCrPJ)i~v@<2~mgI?2z zuCW9#3_~4i0O*u&X5PKZn1?XKm+^Ah6)_qlzyfiS5cgmv1kT5dWKbR|P`9L(7tf-4 zz*efU7h5B?+%B}Xjt_|}ePof*v-e7K-ngi0m?HI0RCu||XD^&73c3g3xIO`4DQqyC)qTQF(5?L*XsOLJh`dYYNff>c9bxMK?+mXs_` z7!P8RNG$8aJ6JWfuTl;7S<=>WeUhb@aokXF2i`Z2Y)2xPz-#6QZ11xy|MsT1KD_07 z_I(se#FG9oeCom!5=Ub*G#Vx4^2!wVse*LlJ$`mpY7cLAknzNRD*&>&#HdC6f~z+D z2s#s_VJXzFUs|#7%uQa8)#hp))%6~ zATWqv+X03s2q;_VcnRiMVgF7$ayxt}q1V(o|Mid(9Dt?t~ z+eVpCpzFg{L{NzxdSWfa4jC=uEK5Qy)$AbpBZY1=0VaPwB}@L<%re2Hi(W_dcWgasPzCJ5#9ppaW= zjkXasS6pl3)~M6IfipR2h?^7Zx_(S4VArgJ*4kf~Vd}<4YUWq5;zoIEV3^^&58tK0 z$LQ>9`$|>PKufn~%UjsRLq3{l|Iwq$t+k#0dMJ`Up?p2WP51j1>=Vdns<0Nzc;L+- zi%G1n`$TLhD?S;aPO2Oimr{`v6A8E?pkd${S?KmHM8vn@6eBZb{BZmiCis^N;K^@m zPJdp}5Yl^Ah5;*KQ*DCSaP)iX-_^4zQ}Fc<*XcpW!@HaSH_^axO>Uk95huAnsDp08 z)`Uk^J4bsM@Ahs=>BZEq*_QhKQ>={C-EAk@_`wlK92+flsUjrf2EuRp)Vowtatu5f8b=(5dRBKVkWWY4lW0NjHm3N>jB{5WSU9MW2JMlG-{=lG2*Qi`*Ld;OlziL;Bg z^lvq@Y3u33oEo{(3Y%791IOZqicjh5;Yb&abCcdCow-5982>)gz|jdi*`3@UtUlG% ztG?b-^Qi%L=g%<-B>)*w-|7$Soj~qz-Sl~`Viy?^f}qP(Dl8I~7H>o|$Ssnx04bo2 zRyOl@M@;UYGSPv|lD$A~CYtcG-u^R*5Y^eJk`#0idg~oAMp5X!U$2L3@&je)?craA z>1dZ2Rh|qY-lFtQxs)I1^M^@EytdU}ttw zKz{t_K&ILm}c*O|aX%Y~EL!oUfN%N`X?ULcx~U{J0vm*-$o zc*T_^7y1Z@u@{Mkj+I;baz5<=?<@$o%q`Ym+R~YXXE$IMpGsAhhXR$K`;CS-k74I3 zE1!Yt{LKGtX;>scGCC3@CnTSL<$+{}#DipuWRK*95>is85rpfX%M7AkdkhZknZm8knZcd z*1h-rz8`y?we~*e{N4`~Ng9WWf(AvB>R@2Ag(!qvL8IqhLVsfLI>VqQx;2H-v~lUE*T+HYx$~kl=)QLq$J?Qe*M4R;3M)Y+wzh$rC-}Ju zle9htMpM<>eA=&OrKUJowYq~pRFY|K8&T6T>y>68xMCD9JIH=S!tbaW36-)yZFy$; zvMeS8L~P3jAU94dNA(vybHg-^W`k6Oed?oDr0AnX< z*jf&AGt<4r$-UDG0o@yJtrS}aFq*&#rK$mcSUEY$AF~IOX*t1<204*NB76C7Qlg2i+#(QDE^&Nj{nsrMnrzHRk%a z8Bb%bWZslQ8t-x}F_oRw6sD{VteI&mK9;3x*Om8^hjl!NBFt$AR+idgRKnMjK9Z;Y z&D8S-qG&6>A-yw^$OnEfu~5QahH1P~_>TOmv#O8ctQ@1J4BV~V;y1Fqlsw{DBQc<7 z^L!nqfll>KXP2STSJ)|d^CkH$6Ik$*|GTcTqjRn58n1A1J=(9zr`!%ERiRTqBv9D5 zPd{`-H^zYBsl`q0F|@})ikEZj#+b$i6a3$BhpqaZP5OzxJv3#=HFG?)XMu^jIJ6vl z+pad6JpDHa78EWwDbIA51A)oDFuhBFOdXhc1_Cl*s@KV;TJB5`QFswOotU_S9Y|@J zQt+vRTHIMh&zaev-JYf~=M7>jdKML!RvO!pxw{^n?O$_YMe{UXJML9KV%|N`%?(>9 z{o3|Eqw8D(M&+QGUFq7ow}!@(tt~0?k>7HH+>5zW4*d1p+5md3nZv_retoAJw&D|A z4^xwDZ5!VWp+%_aq?N)x8-{c>I~UJ!ZqeNr$k#e1G8j+(49vQ{xvNTIoi>rGysGbA zM&YuJfE~V*!|^Ncbv6b6-fV8EB51@Q-uM+Pmt* z`eQwk<7@RITkZTJ1^l9tGj2|nj9*7YXV(~MD!Hj;qIL)5N{3kyV!+54l0d(bE%yM7 z`*xRko)BKn6~OF3lV@T(%)j4-VFv_}pGEb7q8O*+BBsG_cq*5UdSWp z=cmo0k6e)MFiJM$GDrUcpw7Qt+dy&IVQ<_xV zHp|45Bdk7e6rB{yq2PsmtXty_SyNY%Z)E#ozAk@8{utaPp1$KTp*lpu-g>vdOTrd? z6(i7AiDS4}zgOcvz8Z;c3WJ2{IQT4+oKxA!t311lh>@b&TQ0BBODyEy{1m#yYX+xQ zK1|7ryheC5R;3jfXA8XU|MuO86+~io9`xCV+S93$kOd;9>K#KoV)ObQ|1DCA+~jn) znTU*tY{wvAXAt9^%e-}@-SF?~b(w~Ut=TZ~durGY3&;&1w5XZOzegPhi$_o|;P3zMW&4jY%k{=}}Nz3Wj)eVi}Rhc2wNJ!arjB zPVaSCgmvct1O-Ws!-CprtuwfR-qBLq_U~u8^ApsA1vX!(jd$$C)3O|X{KdU#2pUG7 z1t^~>yLJ?>&&60`URYhI>(J7?D5npR$5n81N1+Nq~zR?_9at;yt*72^9hlC zMd}Xy{iw=ikj)RD`v3(=>;&G;$wz08>f8l9aoX>ryS<5fkxS=?DCnHT$8K9}oaJzk z5->H;@5WbJ|;zPTP_PIJ1ZhZZ@0$v>{ZGx#ApQRlOo zEN!l={g-4Ds8<@=J2-w1E-^dko-S0mC8^dQ4ll!Rc50Z-)p;c|j9g}Dd*mhx`cajq zwdE5)FJcXbQKo-s8<&dG>K*i!K6w58-5_7{&m*Ztj!|`T-Gp?gZ)}*gU8Y4I{jnba zfBbjG{c2*v?~gqpx2xz9Vsx@ogoiA0;}`cPih1mUvbVFZs`3eDmm2(bK$-o!j}9`i zZXGpIZilfeVcv%k1;HD;g&)u>=9rBf9Vyo&J^HwNBbnncY%d4x> zW^_CTYgzJ6(4JB+2)J#=^tU%}W8SPcCu;sS_1d{qkqu|WKhuAdA2~{=Zit~YN(oGY zuLn5|SPeY9pOX*gGv_>ZK6d`N;JYO$$oOT_d46X#Z@kU7$cD{*Eby1=_Zv+djWfH< z`w3(C?1gB=decB!J#$#boTYK=;atFk*|b(q zzMUd{cvdKW=u|PAWENt(A_GlXiNaMn33Ei(%2z*bMi6)$uGZb&R8eZVu=n1*4^=x8 z6Zlp?WRr!{71&g07Z%#Y12G40ndU21oAzmpM_+ALbEnc9gQt!+n5u=!cY3>~&&%G( zU9x(S2|lL^pByA|#wiM}zX_U*bxog4RW1#uWW+T`s~|L#_#FK=S;8Zs<*;CtF)SXi z3z6BHdaVPle3$I;f-1)+C6Gx)Y7riV%WG6X>8({rQpT>ZkIwPkT+9mR0*oA9%HwY) zxg4Xi+nly&DdQs&3Kp~TkCLn$3rk0{m40IlyX!_z?3rrcnxj~45>mkM zuo2D6+6)QVI*T>stbDui#f-J=cbX-iL7ZvWk(jNyd{uxhwd@9`!axDWhS|Fp41o;* z8B39k%i?qew9Hm;??yL%dBHpa2k(a1 zHmz^`hc5n|E9mIcO4eEM32~ip?q$sye9Qcte*wTwuw-SFT#iPy7fE|Q^~wc=6Y=~l z-I1_#-Jyvm@8$f}3SwGXrm7>E*i-J7aH#-)ZR?bnPw>4G{tN&)?8Gboxl1$DyG;W6 z`XeXURxbw#O1re*raG`&qsD^3nwD&zQIm~#yV~9%W@~>Cu~CbMIB8ex!{e?H6{*~z zRC7>D2?a4*c699FnqO}LD%I%`p`a$BsGJhYfer&ty{4L>Q?ryNXBmj4`CiS}+THC( z$GCE7X^;;Ex=F+2hd(|Jkg!c{O2hE=kE1PgnA(m^;A0dghRHI z`aaugZEs1Be>4Sq+CL40d9*GF3u7)#*ILX6!!PgtG3zyD`eUs$3F{Iq5d;0h6(gfX zswGlrw##&Undjj#h?8JW>pj?nGNIK5@6kM4=?{iB0aIhOFFtJ2tKT5xiLHf${o94O zwBTm+mS4VUE?EK^kY4A_xn3Ht@q)Te5@Eb37yrGQr>>#BdrX7zVtfNhaM|BU=Y}$I zQdiP=hy`&NdlZo>ouZ+(9LB=?S0LNoblFSM_@GId`QQF*28s=@1Q~{QS$#$b& zu^S^^+4^d8xM_7zf+LK0$-2fh(hcOgTUq|^L>v9zgr&A zr=)T&$3^ABm_YfT`aMJ_n25U=Solb+l6JJ9#aNeSmh@A$_npx?m`d;Q#h?X2^Qct8 zM&%fR*yohwBheoXLZyXwg~_))a; z{p%Wy)o^O2rJQfZN(!}Oa4XA)?e-q9@_TW9xlUjX2Y#vV z{wr_I`dYqfKIf%RDh*HoQ9h|cO!JUl^B`YD6<=oHn_&hnm;+pu4OKga!}DOh@t7@o zI3pDdWXOfcL-U!#-n=i|NXG6*yIvl5e{ra)ZRO8cwj05ZqD&knLCh*_&b*0?eoE}c zN>kQ|9fG2#q)Hs8oL@h#wx^GFX-{TQ>mGcY)Yd4AZdYEi{h0w6Lw>Mfgu4Iy4bZ-BP_&Hs9E{k_(SpSh3seQ|tI)6+@yrla`A#kM=ax#l9qEhuz>XjmniTc66ccpPUJ z#4Y8#qCU>3;pA8_o}W^Nf4J?U&W==Q%-^J;nw=rtJ*eaFfqj5GF6zrrvob=7`)zp^ zlN?nAgj8PpXXRYm>p9bJbcyVz;tI6)s1V3g98=BJ(-jKOzAbH@aq>3#NMlEe^C=H? zj^#R%&!YAdpGS|H6TwyvuwLVwC0w?tfnB@w$B*>tq(Ls+2Cp4o4m-^9k&8D>^W}xH zw&8W3G^`1`$Hi=CM?4i|fQ_PelT)ktc^dWK!YEkDLBynz3SK$W+-VsJgEvs8>$o?E zpAkd%LiW|x%tRVL>F&0r73<_9Xf#rv??cJ!CY6ipu<1YE6Ry0p@`+4#ya(J2_@UTqiBSUl3kC#(yC!b&D~t%v zu)?a-0P3R~os3+s&5v2iBxn&a;MIArrGtr~5E^zqfM?0Vm{V{L=p~sD@Ij^0_W|7w zET9Ux|1fh8?AqEsrY$D4x`>UunTh1WPAu-+?fwdV3dR0ftoiE3Tvi$~TN}?Tham1; zJ_-9X;3l;7bH%6GeK52aW@_^ilET;LQ(CYh?B=KP)@rqJd-MQU;8g@oF%Qpi4MOCRs$ zi)(iv@F07`l|+Q>sWG)pcj%K%o>oi`GrrrDW>?*OYilxvp)B$`a#p+?P>(>q#H=yU zMKYVeMTvWZ_Fo-!F_eLJ=3aH;`~sEt*;F@>940}(yg~SKdv=&eqK38_^yXF5E*`>FSrJ)bXvYtfCl$ zT&|tM9L39>rh<~wu#3s7tmVUKHFaUFaq3qF6KPs=c4m(=sEj#n4(UwRl1h4JmAfWyOkKy^FrHo))oa|`8MH|iBOZ}G8m1<>+>wDxy*vF2qy3FqG+2ht zE%B@aWE83&(zej_N7d|`wmZs${?Ng4^gM~*`1q*f)xA~VN^hkS5@~(Z-@n|~$+*U2 z-}gw;Ym%uMo?;7XQXF`i^~0Bz@J2P;Kh)?x=o&2V+jOEQ<5NDU0l&0rD3 zg_Msv;=@&uT325~6jw15mC&xrIuplh8DD;42pxqvQ5m!nnRtBc*n&}DJv}p;^OwZ` zw0pd1GNuN}b2QrFI*TBxz>wveN0hd~+SbHE`p96pzz%jF7w=HALfs}o@p2v&=&S$V z&ag>%NP!Ui6=L#k!{ecR3G!))s+qZ0Rm-JN#{Vusc*to;0nPw>fGyy|Ke+=q0p7QY&tG(Yy + /bin/bash + generate-certificates.sh + "{{ groups.ipaserver[0] }}" + "{{ ipaserver_domain | default(groups.ipaserver[0].split('.')[1:] | join ('.')) }}" + args: + chdir: "{{ playbook_dir }}" + - name: Test ipaserver installation without CA hosts: ipaserver become: true + vars: # Root CA certificate ipaserver_ca_cert_files: - - /root/freeipa/certificates/root-ca.crt + - /root/ca-less-test/ca.crt # Directory server certificates ipaserver_dirsrv_cert_name: dirsrv-cert ipaserver_dirsrv_cert_files: - - /root/freeipa/certificates/dirsrv.p12 + - /root/ca-less-test/dirsrv.p12 ipaserver_dirsrv_pin: SomePKCS12password # Apache certificates ipaserver_http_cert_name: httpd-cert ipaserver_http_cert_files: - - /root/freeipa/certificates/httpd.p12 + - /root/ca-less-test/httpd.p12 ipaserver_http_pin: SomePKCS12password # PKINIT configuration ipaserver_no_pkinit: no ipaserver_pkinit_cert_name: pkinit-cert ipaserver_pkinit_cert_files: - - /root/freeipa/certificates/pkinit.p12 + - /root/ca-less-test/pkinit.p12 ipaserver_pkinit_pin: SomePKCS12password + pre_tasks: - - name: Copy certificates + - name: Remove "/root/ca-less-test" + file: + path: "/root/ca-less-test" + state: absent + + - name: Generate "/root/ca-less-test" + file: + path: "/root/ca-less-test" + state: directory + + - name: Copy CA certificate + copy: + src: "{{ playbook_dir }}/certificates/root-ca/cert.pem" + dest: "/root/ca-less-test/ca.crt" + owner: root + group: root + mode: "0644" + + - name: Copy p12 certificates copy: src: "{{ playbook_dir }}/certificates/{{ item }}/ipaserver/cert.p12" - dest: "/root/freeipa/certificates/{{ item }}.p12" + dest: "/root/ca-less-test/{{ item }}.p12" owner: root group: root mode: "0644" @@ -34,6 +68,7 @@ - dirsrv - httpd - pkinit + roles: - role: ipaserver - state: present \ No newline at end of file + state: present