mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-05-07 05:43:06 +00:00
6c018b94da
* Install PyOpenSSL and cryptography from PyPi if target Python != system Python. * Work around some CentOS6, 7, Ubuntu 16.04 problems. Improve jinja2 compatibility handling. * Skip tasks that require properties that aren't always there. * Only install OpenSSL when not present. * Improve output. * Improve get_certificate integration test graceful failing. * Fix tests. * Fix assert. * OpenSSL peculiarities. * Fix condition.
55 lines
1.6 KiB
YAML
55 lines
1.6 KiB
YAML
---
|
|
####################################################################
|
|
# WARNING: These are designed specifically for Ansible tests #
|
|
# and should not be used as examples of how to write Ansible roles #
|
|
####################################################################
|
|
|
|
- set_fact:
|
|
skip_tests: false
|
|
|
|
- block:
|
|
|
|
- name: Get servers certificate with backend auto-detection
|
|
get_certificate:
|
|
host: "{{ httpbin_host }}"
|
|
port: 443
|
|
ignore_errors: true
|
|
register: result
|
|
|
|
- set_fact:
|
|
skip_tests: |
|
|
{{
|
|
result is failed and (
|
|
'error: [Errno 1] _ssl.c:492: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure' in result.msg
|
|
or
|
|
'error: _ssl.c:314: Invalid SSL protocol variant specified.' in result.msg
|
|
)
|
|
}}
|
|
|
|
- assert:
|
|
that:
|
|
- result is success or skip_tests
|
|
|
|
when: |
|
|
pyopenssl_version.stdout is version('0.15', '>=') or
|
|
cryptography_version.stdout is version('1.6', '>=')
|
|
|
|
- block:
|
|
|
|
- include_tasks: ../tests/validate.yml
|
|
vars:
|
|
select_crypto_backend: pyopenssl
|
|
|
|
when: pyopenssl_version.stdout is version('0.15', '>=') and not skip_tests
|
|
|
|
- block:
|
|
|
|
- include_tasks: ../tests/validate.yml
|
|
vars:
|
|
select_crypto_backend: cryptography
|
|
|
|
# The module doesn't work with CentOS 6. Since the pyOpenSSL installed there is too old,
|
|
# we never noticed before. This becomes a problem with the new cryptography backend,
|
|
# since there is a new enough cryptography version...
|
|
when: cryptography_version.stdout is version('1.6', '>=') and not skip_tests
|