From a04a8444ec42babd3a91727a496613c727f358f3 Mon Sep 17 00:00:00 2001 From: Christian Franke Date: Wed, 26 Aug 2015 23:50:03 +0200 Subject: Push ssl certificates --- .../files/ssl/wolpertinger.nowhere.ws/cert.pem | 22 +++++ .../files/ssl/wolpertinger.nowhere.ws/chain.pem | 22 +++++ roles/sublab_web/tasks/main.yaml | 21 +++++ site.yml | 1 + vars/ssl.yaml | 97 ++++++++++++++++++++++ 5 files changed, 163 insertions(+) create mode 100644 roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/cert.pem create mode 100644 roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/chain.pem create mode 100644 vars/ssl.yaml diff --git a/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/cert.pem b/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/cert.pem new file mode 100644 index 0000000..48ccadc --- /dev/null +++ b/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/cert.pem @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDuzCCAqOgAwIBAgIJAKF4UGTy4i2cMA0GCSqGSIb3DQEBCwUAMHQxCzAJBgNV +BAYTAkRFMQ8wDQYDVQQIDAZTYXhvbnkxEDAOBgNVBAcMB0xlaXB6aWcxDzANBgNV +BAoMBnN1YmxhYjEPMA0GA1UECwwGc3VibGFiMSAwHgYDVQQDDBd3b2xwZXJ0aW5n +ZXIubm93aGVyZS53czAeFw0xNTA4MjYyMDU5MzdaFw0xNzA4MjUyMDU5MzdaMHQx +CzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZTYXhvbnkxEDAOBgNVBAcMB0xlaXB6aWcx +DzANBgNVBAoMBnN1YmxhYjEPMA0GA1UECwwGc3VibGFiMSAwHgYDVQQDDBd3b2xw +ZXJ0aW5nZXIubm93aGVyZS53czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBALWJeHqWcnGyiLZQSIxETvxxkZCwrgL4bUCj/iS/YXWHb/9fRw3NsDCz5P1G +AZKqmn4oJmahMMWCJ1Ro37Ms/7MsShneUodcz13tIGuBI7RAcS0U8KK7JZ/x5wqv +/1qDNUcTJGNCzYroKnNlMR6Y1ri8dRcBxYneNDAgYB2VbQI3+POuR4Ma89NyjsxD +lSeA5JzpMD3fBF+BauqV0WoXNdOYV37vWG3nzmuy3qwfk00CP/nF+zkVBlG0sqw/ +vgfcv6yz71RdvfOD+NJCBUiWvoLCZCSKEByc91BOs5iObOWA98/cU8YyFzmPGOY5 +b8dOAJyhZKXVzPnFe2etlhBlNbUCAwEAAaNQME4wHQYDVR0OBBYEFHPz9TLW5CVt +DobXXWgX/qP5fhFaMB8GA1UdIwQYMBaAFHPz9TLW5CVtDobXXWgX/qP5fhFaMAwG +A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBACSfz+XaYljMACvKFho7ifH5 +K3qhh+2i4Q9qS+G4mHcoGQP/rMGJE1Uv77mO0W072RSWp8Sc0xUS5Hlir6XZ3LXK +oqfI0541GbksvwM5e2bKyBEcdoClcJt6J7uI5EWjOldXsQpLT1c0OaeHa/kGJ2pU +nS9DzgdUPg7pRxLVE8+OH6UWb5V2BGqMXhV9ZF4iO1QBCRJpHcEp0pk2dSRD6Wdl +aVcLI8Up70iy9SRA+iucJc9TqwyilDUE1bqo3eHsr2Nj+YNi3ZjrzjuB/LL8qr7G +ePiXaq/uPASzCltwNLzKSEwwdndq8fYygsSS2m1zfzeuLXMH4VhL3F7bkCB9rsw= +-----END CERTIFICATE----- diff --git a/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/chain.pem b/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/chain.pem new file mode 100644 index 0000000..48ccadc --- /dev/null +++ b/roles/sublab_web/files/ssl/wolpertinger.nowhere.ws/chain.pem @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDuzCCAqOgAwIBAgIJAKF4UGTy4i2cMA0GCSqGSIb3DQEBCwUAMHQxCzAJBgNV +BAYTAkRFMQ8wDQYDVQQIDAZTYXhvbnkxEDAOBgNVBAcMB0xlaXB6aWcxDzANBgNV +BAoMBnN1YmxhYjEPMA0GA1UECwwGc3VibGFiMSAwHgYDVQQDDBd3b2xwZXJ0aW5n +ZXIubm93aGVyZS53czAeFw0xNTA4MjYyMDU5MzdaFw0xNzA4MjUyMDU5MzdaMHQx +CzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZTYXhvbnkxEDAOBgNVBAcMB0xlaXB6aWcx +DzANBgNVBAoMBnN1YmxhYjEPMA0GA1UECwwGc3VibGFiMSAwHgYDVQQDDBd3b2xw +ZXJ0aW5nZXIubm93aGVyZS53czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC +ggEBALWJeHqWcnGyiLZQSIxETvxxkZCwrgL4bUCj/iS/YXWHb/9fRw3NsDCz5P1G +AZKqmn4oJmahMMWCJ1Ro37Ms/7MsShneUodcz13tIGuBI7RAcS0U8KK7JZ/x5wqv +/1qDNUcTJGNCzYroKnNlMR6Y1ri8dRcBxYneNDAgYB2VbQI3+POuR4Ma89NyjsxD +lSeA5JzpMD3fBF+BauqV0WoXNdOYV37vWG3nzmuy3qwfk00CP/nF+zkVBlG0sqw/ +vgfcv6yz71RdvfOD+NJCBUiWvoLCZCSKEByc91BOs5iObOWA98/cU8YyFzmPGOY5 +b8dOAJyhZKXVzPnFe2etlhBlNbUCAwEAAaNQME4wHQYDVR0OBBYEFHPz9TLW5CVt +DobXXWgX/qP5fhFaMB8GA1UdIwQYMBaAFHPz9TLW5CVtDobXXWgX/qP5fhFaMAwG +A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBACSfz+XaYljMACvKFho7ifH5 +K3qhh+2i4Q9qS+G4mHcoGQP/rMGJE1Uv77mO0W072RSWp8Sc0xUS5Hlir6XZ3LXK +oqfI0541GbksvwM5e2bKyBEcdoClcJt6J7uI5EWjOldXsQpLT1c0OaeHa/kGJ2pU +nS9DzgdUPg7pRxLVE8+OH6UWb5V2BGqMXhV9ZF4iO1QBCRJpHcEp0pk2dSRD6Wdl +aVcLI8Up70iy9SRA+iucJc9TqwyilDUE1bqo3eHsr2Nj+YNi3ZjrzjuB/LL8qr7G +ePiXaq/uPASzCltwNLzKSEwwdndq8fYygsSS2m1zfzeuLXMH4VhL3F7bkCB9rsw= +-----END CERTIFICATE----- diff --git a/roles/sublab_web/tasks/main.yaml b/roles/sublab_web/tasks/main.yaml index fcfc7cb..50a2585 100644 --- a/roles/sublab_web/tasks/main.yaml +++ b/roles/sublab_web/tasks/main.yaml @@ -31,6 +31,27 @@ - wiki.conf notify: Reload apache +- name: Create SSL DIR + file: + path=/etc/apache2/sites/{{ sublab_web_server_name }}/ssl + state=directory + +- name: Place SSL cert and chain + copy: + src=ssl/{{ sublab_web_server_name }}/{{item}} + dest=/etc/apache2/sites/{{ sublab_web_server_name }}/ssl/{{item}} + with_items: + - cert.pem + - chain.pem + notify: Reload apache + +- name: Place SSL key + copy: + content="{{ssl_keys[sublab_web_server_name]}}" + dest="/etc/apache2/sites/{{sublab_web_server_name}}/ssl/key.pem" + mode=0600 + notify: Reload apache + - name: Create Website group group: name=sublab_web diff --git a/site.yml b/site.yml index 93376d9..009eaf6 100644 --- a/site.yml +++ b/site.yml @@ -10,5 +10,6 @@ vars_files: - vars/encrypted.yaml - vars/ldap.yaml + - vars/ssl.yaml vars: sublab_web_server_name: "wolpertinger.nowhere.ws" diff --git a/vars/ssl.yaml b/vars/ssl.yaml new file mode 100644 index 0000000..6de3411 --- /dev/null +++ b/vars/ssl.yaml @@ -0,0 +1,97 @@ +$ANSIBLE_VAULT;1.1;AES256 +66376632613438336166633135336635363430646330373164663336653636303265356164343637 +3662653932396634363338383032623762313038343562310a343834316338643134326565653138 +38316565393030313432663133343735633266303761613963376138333437383039633038633062 +3334373134626165310a333162313532333063613565663266323531613338313565333036613466 +62393963343263643739343334383937663131376631386534663630623430613535373836323937 +61373561623764633638396661643634643630303930306635323034326665363362383661373963 +32633730313233323065343536343565393563316333383631663633623635303835363036393166 +35353031643239616661333930616263343163373561643239396538323530626638613634383138 +38373834343061313363323635626534336437643334323230616461663334383234336131313063 +39353830613136373061373261633239653237313264393633386631303636346265326566616136 +37336661613164646634373864316539646132623534303431303531613637643739356335386436 +38663164346130623365366166393431643665326635356335396332396433646563353466316631 +32633835633535613164393333653165343365343536623965323266353239333365653965663564 +31333631613732666133643534656366393039386166396231376333663761396232636437353432 +65653232366430336236376338353636663737633632336237656439666131306164376330313430 +63633865663438323633653566356133306330323863643966306437363839633866306233336536 +63333537316236623238343238353366653836343139353737313736393335343865623734316332 +66323233373531616631656537373662663232333166383562373662333836346531363137366639 +63343732396234613734303664613561373731343464343637306333373865386564613530636438 +36383731356130386165323530316365636339313837356363613561366361666533313664346161 +30613235383636343236623463323339396466613138623835643438393734613438373034336163 +39373837636639313638646238663566373466666538656439356464336533393230383233623235 +64373464323962326537323864393733636539353862373063373161636338613366663936336236 +65666466613139363831396638396630336438353437323466613932313432373538626663613463 +62303562353833366133383964343764306237316135616566303066663636323035373631643637 +66386464333132343739316264363264353232353566343738656461313663303835313731313732 +34623161643361386465303934643338363564633163633065333862666337323235376563353939 +63373662373665336331343338626337316566653964363361656161353337323931626538643939 +65626235326462363636383936353231653338393037343636316635613832326135373661393538 +37333138653039613333616566373763326539626664616337636632636563623238643733663466 +30313531323064653938313066363539336163376234633161376531306634386631353433663765 +61343464636661326231383766336261373664316238346238366532393662653265396537306438 +38343437396438363163616365303137353863303338643564306462323935376539316434633464 +66653334613432333061643136653038373965346564616666313165313734623737616335366138 +62653336303636303565356137303162653361343633326632393762623730316531396637623539 +33383837303832326532303632346638633837386635656431663237636333363038323565643836 +33623765366635306334376564306233656133626337313834386566656432373463663265373266 +61623765323734393365356538316539323839356235333234393332646561323530653733663866 +36636438343362346535373163636332383733313166353139633636623664363636626630616236 +37666562656438353734663562303330636139386430373661613666326462623464376362636235 +32373337646363303866313739313566366639663061366561656363666339373161623265383531 +34646435653830313664653563356331616137643436313635386366316237623037383465666365 +35376633613965383039636631316332623632613634646636333332363239393564646138333735 +61386637616264636230616239653663393338376434373362363538313462373837363036653432 +32373934313437356132616562383561393661646435393364306533363330643765383336356638 +62663061303733663934393562656533313136656637306166376564336661393232643662343436 +61386339333133623135643131313436633461333339313065306134636239373266663064386239 +33623435643637623463666265353738663134613833633563666464376664633061373936346133 +31623638663961363630313763366130323931323662313334623532386639396137663066373537 +39656235396137336534623464373635323731303061663064336661396430353662633137613662 +66353837643561316362393866666437343835653764396334373062623165363762653739653939 +32353163376562363734363638326131633762323961306231383534333130653635626466393331 +38303332633661666333376665613337353233633763633836393234636532383334386230356238 +38313139393937353134313962643330323335306161636363303266356439613838393931626436 +31613537626633636165303962616637346666333935616661336639306138333835633931653832 +64386132626661393239653633336636363938326131643133396263623362353430633165336462 +30653039316531323234343263346166376437323562336338626362633638303033636530666339 +63656430383236363732333636386565343334396634326536646162356165666133383462633439 +30666132383035643235643535633435366135666338623532626564623162303463316266353363 +66383530383632616638656434646132626265336461653066393866333431663861393631376136 +33613039333535623763323036366633396163326561313930633264663631303964323538303433 +31363165313433386439393962313664376634643639623235313736623462653865646330343331 +61616566336361303766653565343535663130363362333163326463616465303138363237656434 +34336538646130303833366530633963613462396465333036353165616666663434626561396336 +64313333633135626439346261663165623131356463383863656161333838623733316466393436 +38646635633538306334653734373034303361343963663835333736336530346365333834303165 +35323434643734343136333665653564376534336662613864626636356365393365636132653538 +39383461636665393438666634373263343661616233613330663036613164616665366638333431 +39323136643363313939346161376636663432323064333931383931333734393338626637616333 +37643230323832646634396263343533343630306563313934613630333230396533326665626634 +36663064373063363533333339346638653262623934336563353939393932373730313065383765 +37643738306663613565343634306139306462353039353966633234383232626366373565323832 +38383437316330613731613534326532376365626437613936656539306164376561306630333639 +66346163336339633536363464616131643731373139613332376666383939373030616137656437 +37303761626135633432313833323764393735623166666362333636633863653138313131333833 +33353365393236303862633062656230333639393566663034656634653037376530396265383530 +31613962346335313932316366353534656134396263316634343164653835623361303564323035 +61313661363965366431626661396663366366313036666333303739653539633261326635633062 +31363764633639623732663061353261653339653632356238633230363434633962343937303633 +39363737313162376633333862323235353230363837663036616363323631366638656261306361 +63613362303034663139346462373262373535383762393631323334343264623539386136363761 +34623335343031336230613534316665666234316363323162353261323835333239323061643966 +65653938386235303630653162653931376133656561303237643761306533383138633865326333 +64623337656164343834396336636261316466303935383833363466393434323562313364633161 +39653534666535633263336131383062363034626435616461363665373530646531323936373661 +62353730656334376566363561303035363039396634343866336564663866363161316334323631 +61653535373630383236353532313834633533353733383738343766333861646431666132613435 +39653665663364656537343866333838333763333931356437666336663234653262646635356261 +30616236306533313532323066393365643831373863386136303264656439623633633461393862 +61366462616639626239366462626338626233613231613639643535333632313264316132313266 +61633333316534623032616262393235663138303138626638636436323439623038636139346334 +39303536353936383735343465303631373330343937333235396138326539316263643134396631 +37373066343263366239323039663830353133633334613164323632663337623165363038616562 +32373235343633363934346264346332623366386164353964643933623031336237386530376434 +31616466383263616639356566366465653266663634356236383338663633356662643736303132 +66343664613463383831 -- cgit v1.2.1