mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-05-08 06:13:03 +00:00
642d6872d1
* Disable consistency checking of RSA keys for cryptography 42.0.0 which no longer gives access to the required function. (#702)
(cherry picked from commit 87af1f2761)
* Adjust tests to ignore key_is_consistent.
79 lines
2.7 KiB
YAML
79 lines
2.7 KiB
YAML
---
|
|
####################################################################
|
|
# WARNING: These are designed specifically for Ansible tests #
|
|
# and should not be used as examples of how to write Ansible roles #
|
|
####################################################################
|
|
|
|
- name: Generate privatekey 1
|
|
openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey_1.pem'
|
|
|
|
- name: Generate privatekey 2 (less bits)
|
|
openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey_2.pem'
|
|
type: RSA
|
|
size: '{{ default_rsa_key_size }}'
|
|
|
|
- name: Generate privatekey 3 (with password)
|
|
openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey_3.pem'
|
|
passphrase: hunter2
|
|
cipher: auto
|
|
size: '{{ default_rsa_key_size }}'
|
|
select_crypto_backend: cryptography
|
|
|
|
- name: Generate privatekey 4 (ECC)
|
|
openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey_4.pem'
|
|
type: ECC
|
|
curve: "{{ (ansible_distribution == 'CentOS' and ansible_distribution_major_version == '6') | ternary('secp521r1', 'secp256k1') }}"
|
|
# ^ cryptography on CentOS6 doesn't support secp256k1, so we use secp521r1 instead
|
|
select_crypto_backend: cryptography
|
|
|
|
- name: Generate privatekey 5 (DSA)
|
|
openssl_privatekey:
|
|
path: '{{ remote_tmp_dir }}/privatekey_5.pem'
|
|
type: DSA
|
|
size: 1024
|
|
|
|
- name: Prepare result list
|
|
set_fact:
|
|
info_results: {}
|
|
|
|
- name: Running tests with pyOpenSSL backend
|
|
include_tasks: impl.yml
|
|
vars:
|
|
select_crypto_backend: pyopenssl
|
|
when: pyopenssl_version.stdout is version('0.15', '>=')
|
|
|
|
- name: Prepare result list
|
|
set_fact:
|
|
pyopenssl_info_results: "{{ info_results }}"
|
|
info_results: {}
|
|
|
|
- name: Running tests with cryptography backend
|
|
include_tasks: impl.yml
|
|
vars:
|
|
select_crypto_backend: cryptography
|
|
when: cryptography_version.stdout is version('1.2.3', '>=')
|
|
|
|
- name: Prepare result list
|
|
set_fact:
|
|
cryptography_info_results: "{{ info_results }}"
|
|
|
|
- block:
|
|
- name: Dump pyOpenSSL results
|
|
debug:
|
|
var: pyopenssl_info_results
|
|
- name: Dump cryptography results
|
|
debug:
|
|
var: cryptography_info_results
|
|
- name: Compare results
|
|
assert:
|
|
that:
|
|
- >-
|
|
(pyopenssl_info_results[item] | dict2items | rejectattr("key", "equalto", "deprecations") | rejectattr("key", "equalto", "key_is_consistent") | list | items2dict)
|
|
== (cryptography_info_results[item] | dict2items | rejectattr("key", "equalto", "deprecations") | rejectattr("key", "equalto", "key_is_consistent") | list | items2dict)
|
|
loop: "{{ pyopenssl_info_results.keys() | intersect(cryptography_info_results.keys()) | list }}"
|
|
when: pyopenssl_version.stdout is version('0.15', '>=') and cryptography_version.stdout is version('1.2.3', '>=')
|