Fix linting errors.

tests/integration/targets/openssl_privatekey/tasks/impl.yml

@@ -93,63 +93,63 @@
 
 - set_fact:
     ecc_types:
-    - curve: secp384r1
-      openssl_name: secp384r1
-      min_cryptography_version: "0.5"
-    - curve: secp521r1
-      openssl_name: secp521r1
-      min_cryptography_version: "0.5"
-    - curve: secp224r1
-      openssl_name: secp224r1
-      min_cryptography_version: "0.5"
-    - curve: secp192r1
-      openssl_name: prime192v1
-      min_cryptography_version: "0.5"
-    - curve: secp256r1
-      openssl_name: secp256r1
-      min_cryptography_version: "0.5"
-    - curve: secp256k1
-      openssl_name: secp256k1
-      min_cryptography_version: "0.9"
-    - curve: brainpoolP256r1
-      openssl_name: brainpoolP256r1
-      min_cryptography_version: "2.2"
-    - curve: brainpoolP384r1
-      openssl_name: brainpoolP384r1
-      min_cryptography_version: "2.2"
-    - curve: brainpoolP512r1
-      openssl_name: brainpoolP512r1
-      min_cryptography_version: "2.2"
-    - curve: sect571k1
-      openssl_name: sect571k1
-      min_cryptography_version: "0.5"
-    - curve: sect409k1
-      openssl_name: sect409k1
-      min_cryptography_version: "0.5"
-    - curve: sect283k1
-      openssl_name: sect283k1
-      min_cryptography_version: "0.5"
-    - curve: sect233k1
-      openssl_name: sect233k1
-      min_cryptography_version: "0.5"
-    - curve: sect163k1
-      openssl_name: sect163k1
-      min_cryptography_version: "0.5"
-    - curve: sect571r1
-      openssl_name: sect571r1
-      min_cryptography_version: "0.5"
-    - curve: sect409r1
-      openssl_name: sect409r1
-      min_cryptography_version: "0.5"
-    - curve: sect283r1
-      openssl_name: sect283r1
-      min_cryptography_version: "0.5"
-    - curve: sect233r1
-      openssl_name: sect233r1
-      min_cryptography_version: "0.5"
-    - curve: sect163r2
-      openssl_name: sect163r2
-      min_cryptography_version: "0.5"
+      - curve: secp384r1
+        openssl_name: secp384r1
+        min_cryptography_version: "0.5"
+      - curve: secp521r1
+        openssl_name: secp521r1
+        min_cryptography_version: "0.5"
+      - curve: secp224r1
+        openssl_name: secp224r1
+        min_cryptography_version: "0.5"
+      - curve: secp192r1
+        openssl_name: prime192v1
+        min_cryptography_version: "0.5"
+      - curve: secp256r1
+        openssl_name: secp256r1
+        min_cryptography_version: "0.5"
+      - curve: secp256k1
+        openssl_name: secp256k1
+        min_cryptography_version: "0.9"
+      - curve: brainpoolP256r1
+        openssl_name: brainpoolP256r1
+        min_cryptography_version: "2.2"
+      - curve: brainpoolP384r1
+        openssl_name: brainpoolP384r1
+        min_cryptography_version: "2.2"
+      - curve: brainpoolP512r1
+        openssl_name: brainpoolP512r1
+        min_cryptography_version: "2.2"
+      - curve: sect571k1
+        openssl_name: sect571k1
+        min_cryptography_version: "0.5"
+      - curve: sect409k1
+        openssl_name: sect409k1
+        min_cryptography_version: "0.5"
+      - curve: sect283k1
+        openssl_name: sect283k1
+        min_cryptography_version: "0.5"
+      - curve: sect233k1
+        openssl_name: sect233k1
+        min_cryptography_version: "0.5"
+      - curve: sect163k1
+        openssl_name: sect163k1
+        min_cryptography_version: "0.5"
+      - curve: sect571r1
+        openssl_name: sect571r1
+        min_cryptography_version: "0.5"
+      - curve: sect409r1
+        openssl_name: sect409r1
+        min_cryptography_version: "0.5"
+      - curve: sect283r1
+        openssl_name: sect283r1
+        min_cryptography_version: "0.5"
+      - curve: sect233r1
+        openssl_name: sect233r1
+        min_cryptography_version: "0.5"
+      - curve: sect163r2
+        openssl_name: sect163r2
+        min_cryptography_version: "0.5"
 
 - name: "({{ select_crypto_backend }}) Test ECC key generation"
   openssl_privatekey:
@@ -180,29 +180,29 @@
   register: privatekey_ecc_idempotency
 
 - block:
-  - name: "({{ select_crypto_backend }}) Test other type generation"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey-{{ item.type }}.pem'
-      type: "{{ item.type }}"
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    when: cryptography_version.stdout is version(item.min_version, '>=')
-    loop: "{{ types }}"
-    loop_control:
-      label: "{{ item.type }}"
-    ignore_errors: true
-    register: privatekey_t1_generate
+    - name: "({{ select_crypto_backend }}) Test other type generation"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey-{{ item.type }}.pem'
+        type: "{{ item.type }}"
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      when: cryptography_version.stdout is version(item.min_version, '>=')
+      loop: "{{ types }}"
+      loop_control:
+        label: "{{ item.type }}"
+      ignore_errors: true
+      register: privatekey_t1_generate
 
-  - name: "({{ select_crypto_backend }}) Test other type generation (idempotency)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey-{{ item.type }}.pem'
-      type: "{{ item.type }}"
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    when: cryptography_version.stdout is version(item.min_version, '>=')
-    loop: "{{ types }}"
-    loop_control:
-      label: "{{ item.type }}"
-    ignore_errors: true
-    register: privatekey_t1_idempotency
+    - name: "({{ select_crypto_backend }}) Test other type generation (idempotency)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey-{{ item.type }}.pem'
+        type: "{{ item.type }}"
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      when: cryptography_version.stdout is version(item.min_version, '>=')
+      loop: "{{ types }}"
+      loop_control:
+        label: "{{ item.type }}"
+      ignore_errors: true
+      register: privatekey_t1_idempotency
 
   when: select_crypto_backend == 'cryptography'
   vars:
@@ -339,205 +339,204 @@
   register: privatekey_mode_3_file_change
 
 - block:
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: auto
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_1
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: auto
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_1
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (idempotent)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: auto
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_2
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (idempotent)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: auto
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_2
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS1 format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: pkcs1
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_3
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS1 format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: pkcs1
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_3
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: pkcs8
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_4
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: pkcs8
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_4
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (idempotent)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: pkcs8
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_5
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (idempotent)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: pkcs8
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_5
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (ignore)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: auto_ignore
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_6
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (ignore)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: auto_ignore
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_6
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (no ignore)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: auto
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_7
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - auto format (no ignore)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: auto
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_7
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - raw format (fail)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: raw
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    ignore_errors: true
-    register: privatekey_fmt_1_step_8
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - raw format (fail)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: raw
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      ignore_errors: true
+      register: privatekey_fmt_1_step_8
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
-    openssl_privatekey_info:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_9_before
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
+      openssl_privatekey_info:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_9_before
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      format: pkcs8
-      format_mismatch: convert
-      size: '{{ default_rsa_key_size }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_9
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        format: pkcs8
+        format_mismatch: convert
+        size: '{{ default_rsa_key_size }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_9
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
-    openssl_privatekey_info:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    register: privatekey_fmt_1_step_9_after
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_1 - PKCS8 format (convert)"
+      openssl_privatekey_info:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_1.pem'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      register: privatekey_fmt_1_step_9_after
 
   when: 'select_crypto_backend == "cryptography"'
 
 - block:
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - PKCS8 format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: pkcs8
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    ignore_errors: true
-    register: privatekey_fmt_2_step_1
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - PKCS8 format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: pkcs8
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      ignore_errors: true
+      register: privatekey_fmt_2_step_1
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - PKCS8 format (idempotent)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: pkcs8
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    ignore_errors: true
-    register: privatekey_fmt_2_step_2
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - PKCS8 format (idempotent)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: pkcs8
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      ignore_errors: true
+      register: privatekey_fmt_2_step_2
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - raw format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: raw
-      select_crypto_backend: '{{ select_crypto_backend }}'
-      return_content: true
-    ignore_errors: true
-    register: privatekey_fmt_2_step_3
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - raw format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: raw
+        select_crypto_backend: '{{ select_crypto_backend }}'
+        return_content: true
+      ignore_errors: true
+      register: privatekey_fmt_2_step_3
 
-  - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
-    slurp:
-      src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
-    ignore_errors: true
-    register: content
+    - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
+      slurp:
+        src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
+      ignore_errors: true
+      register: content
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
-    assert:
-      that:
-        - privatekey_fmt_2_step_3.privatekey == content.content
-    when: privatekey_fmt_2_step_1 is not failed
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
+      assert:
+        that:
+          - privatekey_fmt_2_step_3.privatekey == content.content
+      when: privatekey_fmt_2_step_1 is not failed
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - raw format (idempotent)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: raw
-      select_crypto_backend: '{{ select_crypto_backend }}'
-      return_content: true
-    ignore_errors: true
-    register: privatekey_fmt_2_step_4
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - raw format (idempotent)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: raw
+        select_crypto_backend: '{{ select_crypto_backend }}'
+        return_content: true
+      ignore_errors: true
+      register: privatekey_fmt_2_step_4
 
-  - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
-    slurp:
-      src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
-    ignore_errors: true
-    register: content
+    - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
+      slurp:
+        src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
+      ignore_errors: true
+      register: content
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
-    assert:
-      that:
-        - privatekey_fmt_2_step_4.privatekey == content.content
-    when: privatekey_fmt_2_step_1 is not failed
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
+      assert:
+        that:
+          - privatekey_fmt_2_step_4.privatekey == content.content
+      when: privatekey_fmt_2_step_1 is not failed
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - auto format (ignore)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: auto_ignore
-      select_crypto_backend: '{{ select_crypto_backend }}'
-      return_content: true
-    ignore_errors: true
-    register: privatekey_fmt_2_step_5
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - auto format (ignore)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: auto_ignore
+        select_crypto_backend: '{{ select_crypto_backend }}'
+        return_content: true
+      ignore_errors: true
+      register: privatekey_fmt_2_step_5
 
-  - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
-    slurp:
-      src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
-    ignore_errors: true
-    register: content
+    - name: "({{ select_crypto_backend }}) Read privatekey_fmt_2.pem"
+      slurp:
+        src: "{{ remote_tmp_dir }}/privatekey_fmt_2.pem"
+      ignore_errors: true
+      register: content
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
-    assert:
-      that:
-        - privatekey_fmt_2_step_5.privatekey == content.content
-    when: privatekey_fmt_2_step_1 is not failed
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is base64 encoded"
+      assert:
+        that:
+          - privatekey_fmt_2_step_5.privatekey == content.content
+      when: privatekey_fmt_2_step_1 is not failed
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - auto format (no ignore)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-      type: X448
-      format: auto
-      select_crypto_backend: '{{ select_crypto_backend }}'
-      return_content: true
-    ignore_errors: true
-    register: privatekey_fmt_2_step_6
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - auto format (no ignore)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+        type: X448
+        format: auto
+        select_crypto_backend: '{{ select_crypto_backend }}'
+        return_content: true
+      ignore_errors: true
+      register: privatekey_fmt_2_step_6
 
-  - name: "({{ select_crypto_backend }}) Read private key"
-    slurp:
-      src: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
-    register: slurp
-    when: privatekey_fmt_2_step_1 is not failed
+    - name: "({{ select_crypto_backend }}) Read private key"
+      slurp:
+        src: '{{ remote_tmp_dir }}/privatekey_fmt_2.pem'
+      register: slurp
+      when: privatekey_fmt_2_step_1 is not failed
 
-  - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is not base64 encoded"
-    assert:
-      that:
-        - privatekey_fmt_2_step_6.privatekey == (slurp.content | b64decode)
-    when: privatekey_fmt_2_step_1 is not failed
+    - name: "({{ select_crypto_backend }}) Generate privatekey_fmt_2 - verify that returned content is not base64 encoded"
+      assert:
+        that:
+          - privatekey_fmt_2_step_6.privatekey == (slurp.content | b64decode)
+      when: privatekey_fmt_2_step_1 is not failed
 
   when: 'select_crypto_backend == "cryptography" and cryptography_version.stdout is version("2.6", ">=")'
 
 
-
 # Test regenerate option
 
 - name: "({{ select_crypto_backend }}) Regenerate - setup simple keys"
@@ -771,105 +770,105 @@
       - result.results[4] is changed
 
 - block:
-  - name: "({{ select_crypto_backend }}) Regenerate - redistribute keys"
-    copy:
-      src: '{{ remote_tmp_dir }}/regenerate-a-always.pem'
-      dest: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      remote_src: true
-    loop: "{{ regenerate_values }}"
-    when: "item != 'always'"
+    - name: "({{ select_crypto_backend }}) Regenerate - redistribute keys"
+      copy:
+        src: '{{ remote_tmp_dir }}/regenerate-a-always.pem'
+        dest: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        remote_src: true
+      loop: "{{ regenerate_values }}"
+      when: "item != 'always'"
 
-  - name: "({{ select_crypto_backend }}) Regenerate - format mismatch (check mode)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      type: DSA
-      size: '{{ default_rsa_key_size }}'
-      format: pkcs8
-      regenerate: '{{ item }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    check_mode: true
-    loop: "{{ regenerate_values }}"
-    ignore_errors: true
-    register: result
-  - assert:
-      that:
-        - result.results[0] is success and result.results[0] is not changed
-        - result.results[1] is failed
-        - "'Key has wrong format. Will not proceed.' in result.results[1].msg"
-        - result.results[2] is changed
-        - result.results[3] is changed
-        - result.results[4] is changed
+    - name: "({{ select_crypto_backend }}) Regenerate - format mismatch (check mode)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        type: DSA
+        size: '{{ default_rsa_key_size }}'
+        format: pkcs8
+        regenerate: '{{ item }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      check_mode: true
+      loop: "{{ regenerate_values }}"
+      ignore_errors: true
+      register: result
+    - assert:
+        that:
+          - result.results[0] is success and result.results[0] is not changed
+          - result.results[1] is failed
+          - "'Key has wrong format. Will not proceed.' in result.results[1].msg"
+          - result.results[2] is changed
+          - result.results[3] is changed
+          - result.results[4] is changed
 
-  - name: "({{ select_crypto_backend }}) Regenerate - format mismatch"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      type: DSA
-      size: '{{ default_rsa_key_size }}'
-      format: pkcs8
-      regenerate: '{{ item }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    loop: "{{ regenerate_values }}"
-    ignore_errors: true
-    register: result
-  - assert:
-      that:
-        - result.results[0] is success and result.results[0] is not changed
-        - result.results[1] is failed
-        - "'Key has wrong format. Will not proceed.' in result.results[1].msg"
-        - result.results[2] is changed
-        - result.results[3] is changed
-        - result.results[4] is changed
+    - name: "({{ select_crypto_backend }}) Regenerate - format mismatch"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        type: DSA
+        size: '{{ default_rsa_key_size }}'
+        format: pkcs8
+        regenerate: '{{ item }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      loop: "{{ regenerate_values }}"
+      ignore_errors: true
+      register: result
+    - assert:
+        that:
+          - result.results[0] is success and result.results[0] is not changed
+          - result.results[1] is failed
+          - "'Key has wrong format. Will not proceed.' in result.results[1].msg"
+          - result.results[2] is changed
+          - result.results[3] is changed
+          - result.results[4] is changed
 
-  - name: "({{ select_crypto_backend }}) Regenerate - redistribute keys"
-    copy:
-      src: '{{ remote_tmp_dir }}/regenerate-a-always.pem'
-      dest: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      remote_src: true
-    loop: "{{ regenerate_values }}"
-    when: "item != 'always'"
+    - name: "({{ select_crypto_backend }}) Regenerate - redistribute keys"
+      copy:
+        src: '{{ remote_tmp_dir }}/regenerate-a-always.pem'
+        dest: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        remote_src: true
+      loop: "{{ regenerate_values }}"
+      when: "item != 'always'"
 
-  - name: "({{ select_crypto_backend }}) Regenerate - convert format (check mode)"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      type: DSA
-      size: '{{ default_rsa_key_size }}'
-      format: pkcs1
-      format_mismatch: convert
-      regenerate: '{{ item }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    check_mode: true
-    loop: "{{ regenerate_values }}"
-    register: result
-  - assert:
-      that:
-        - result.results[0] is changed
-        - result.results[1] is changed
-        - result.results[2] is changed
-        - result.results[3] is changed
-        - result.results[4] is changed
+    - name: "({{ select_crypto_backend }}) Regenerate - convert format (check mode)"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        type: DSA
+        size: '{{ default_rsa_key_size }}'
+        format: pkcs1
+        format_mismatch: convert
+        regenerate: '{{ item }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      check_mode: true
+      loop: "{{ regenerate_values }}"
+      register: result
+    - assert:
+        that:
+          - result.results[0] is changed
+          - result.results[1] is changed
+          - result.results[2] is changed
+          - result.results[3] is changed
+          - result.results[4] is changed
 
-  - name: "({{ select_crypto_backend }}) Regenerate - convert format"
-    openssl_privatekey:
-      path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
-      type: DSA
-      size: '{{ default_rsa_key_size }}'
-      format: pkcs1
-      format_mismatch: convert
-      regenerate: '{{ item }}'
-      select_crypto_backend: '{{ select_crypto_backend }}'
-    loop: "{{ regenerate_values }}"
-    register: result
-  - assert:
-      that:
-        - result.results[0] is changed
-        - result.results[1] is changed
-        - result.results[2] is changed
-        - result.results[3] is changed
-        - result.results[4] is changed
-        # for all values but 'always', the key should have not been regenerated.
-        # verify this by comparing fingerprints:
-        - result.results[0].fingerprint == result.results[1].fingerprint
-        - result.results[0].fingerprint == result.results[2].fingerprint
-        - result.results[0].fingerprint == result.results[3].fingerprint
-        - result.results[0].fingerprint != result.results[4].fingerprint
+    - name: "({{ select_crypto_backend }}) Regenerate - convert format"
+      openssl_privatekey:
+        path: '{{ remote_tmp_dir }}/regenerate-a-{{ item }}.pem'
+        type: DSA
+        size: '{{ default_rsa_key_size }}'
+        format: pkcs1
+        format_mismatch: convert
+        regenerate: '{{ item }}'
+        select_crypto_backend: '{{ select_crypto_backend }}'
+      loop: "{{ regenerate_values }}"
+      register: result
+    - assert:
+        that:
+          - result.results[0] is changed
+          - result.results[1] is changed
+          - result.results[2] is changed
+          - result.results[3] is changed
+          - result.results[4] is changed
+          # for all values but 'always', the key should have not been regenerated.
+          # verify this by comparing fingerprints:
+          - result.results[0].fingerprint == result.results[1].fingerprint
+          - result.results[0].fingerprint == result.results[2].fingerprint
+          - result.results[0].fingerprint == result.results[3].fingerprint
+          - result.results[0].fingerprint != result.results[4].fingerprint
   when: 'select_crypto_backend == "cryptography" and cryptography_version.stdout is version("2.6", ">=")'

tests/integration/targets/openssl_privatekey/tasks/main.yml

@@ -27,9 +27,9 @@
 - name: Compile list of elliptic curves supported by OpenSSL (CentOS 6)
   set_fact:
     openssl_ecc_list:
-    - secp384r1
-    - secp521r1
-    - prime256v1
+      - secp384r1
+      - secp521r1
+      - prime256v1
   when: ansible_distribution == 'CentOS' and ansible_distribution_major_version == '6'
 
 - name: List of elliptic curves supported by OpenSSL
@@ -41,13 +41,13 @@
     size: '{{ default_rsa_key_size }}'
 
 - block:
-  - name: Running tests with cryptography backend
-    include_tasks: impl.yml
-    vars:
-      select_crypto_backend: cryptography
+    - name: Running tests with cryptography backend
+      include_tasks: impl.yml
+      vars:
+        select_crypto_backend: cryptography
 
-  - import_tasks: ../tests/validate.yml
-    vars:
-      select_crypto_backend: cryptography
+    - import_tasks: ../tests/validate.yml
+      vars:
+        select_crypto_backend: cryptography
 
   when: cryptography_version.stdout is version('0.5', '>=')

tests/integration/targets/openssl_privatekey/tests/validate.yml

@@ -111,7 +111,7 @@
 - name: "({{ select_crypto_backend }}) Validate ECC generation"
   assert:
     that:
-    - item is changed
+      - item is changed
   loop: "{{ privatekey_ecc_generate.results }}"
   when: "'skip_reason' not in item"
   loop_control:
@@ -120,7 +120,7 @@
 - name: "({{ select_crypto_backend }}) Validate ECC generation (curve type)"
   assert:
     that:
-    - "'skip_reason' in item or item.item.item.openssl_name == item.stdout"
+      - "'skip_reason' in item or item.item.item.openssl_name == item.stdout"
   loop: "{{ privatekey_ecc_dump.results }}"
   when: "'skip_reason' not in item"
   loop_control:
@@ -129,7 +129,7 @@
 - name: "({{ select_crypto_backend }}) Validate ECC generation idempotency"
   assert:
     that:
-    - item is not changed
+      - item is not changed
   loop: "{{ privatekey_ecc_idempotency.results }}"
   when: "'skip_reason' not in item"
   loop_control:
@@ -138,8 +138,8 @@
 - name: "({{ select_crypto_backend }}) Validate other type generation (just check changed)"
   assert:
     that:
-    - (item is succeeded and item is changed) or
-      (item is failed and 'Cryptography backend does not support the algorithm required for ' in item.msg and system_potentially_has_no_algorithm_support)
+      - (item is succeeded and item is changed) or
+        (item is failed and 'Cryptography backend does not support the algorithm required for ' in item.msg and system_potentially_has_no_algorithm_support)
   loop: "{{ privatekey_t1_generate.results }}"
   when: "'skip_reason' not in item"
   loop_control:
@@ -148,8 +148,8 @@
 - name: "({{ select_crypto_backend }}) Validate other type generation idempotency"
   assert:
     that:
-    - (item is succeeded and item is not changed) or
-      (item is failed and 'Cryptography backend does not support the algorithm required for ' in item.msg and system_potentially_has_no_algorithm_support)
+      - (item is succeeded and item is not changed) or
+        (item is failed and 'Cryptography backend does not support the algorithm required for ' in item.msg and system_potentially_has_no_algorithm_support)
   loop: "{{ privatekey_t1_idempotency.results }}"
   when: "'skip_reason' not in item"
   loop_control: