Bertrand Lanson
33941ed34a
All checks were successful
test / Linting (push) Successful in 17s
test / Molecule tests (default, debian11) (push) Successful in 58s
test / Molecule tests (default, debian12) (push) Successful in 38s
test / Molecule tests (default, ubuntu2204) (push) Successful in 43s
test / Molecule tests (default, ubuntu2004) (push) Successful in 1m20s
test / Molecule tests (with_custom_ca, debian12) (push) Successful in 45s
test / Molecule tests (with_custom_ca, debian11) (push) Successful in 1m2s
test / Molecule tests (with_custom_ca, ubuntu2204) (push) Successful in 48s
test / Molecule tests (with_custom_ca, ubuntu2004) (push) Successful in 1m7s
54 lines
2.1 KiB
YAML
54 lines
2.1 KiB
YAML
---
|
|
- name: Verify
|
|
hosts: all
|
|
gather_facts: true
|
|
become: true
|
|
tasks:
|
|
- name: "Test: directory /usr/local/share/ca-certificates"
|
|
block:
|
|
- name: "Stat directory /usr/local/share/ca-certificates"
|
|
ansible.builtin.stat:
|
|
path: "/usr/local/share/ca-certificates"
|
|
register: usr_local_share_ca_certificates
|
|
|
|
- name: "Find files in directory /usr/local/share/ca-certificates"
|
|
ansible.builtin.find:
|
|
paths: "/usr/local/share/ca-certificates"
|
|
file_type: file
|
|
register: usr_local_share_ca_certificates_ls
|
|
|
|
- name: "Verify directory /usr/local/share/ca-certificates"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- usr_local_share_ca_certificates.stat.exists
|
|
- usr_local_share_ca_certificates.stat.isdir
|
|
- usr_local_share_ca_certificates.stat.pw_name == 'root'
|
|
- usr_local_share_ca_certificates.stat.gr_name == 'root'
|
|
- usr_local_share_ca_certificates.stat.mode == '0755'
|
|
- (usr_local_share_ca_certificates_ls.files|length) == 1
|
|
- (usr_local_share_ca_certificates_ls.files[0].path|basename) == 'isrg_root.crt'
|
|
|
|
- name: "Test: certificate isrg_root.crt"
|
|
block:
|
|
- name: "Stat file /usr/local/share/ca-certificates/isrg_root.crt"
|
|
ansible.builtin.stat:
|
|
path: "/usr/local/share/ca-certificates/isrg_root.crt"
|
|
register: isrg_root_file
|
|
|
|
- name: "Get certificate info"
|
|
community.crypto.x509_certificate_info:
|
|
path: "/usr/local/share/ca-certificates/isrg_root.crt"
|
|
register: isrg_root_pem
|
|
|
|
- name: "Verify certificate is readable"
|
|
ansible.builtin.assert:
|
|
that:
|
|
- isrg_root_file.stat.exists
|
|
- isrg_root_file.stat.isreg
|
|
- isrg_root_file.stat.pw_name == 'root'
|
|
- isrg_root_file.stat.gr_name == 'root'
|
|
- isrg_root_file.stat.mode == '0644'
|
|
- not isrg_root_pem.failed
|
|
- not isrg_root_pem.expired
|
|
- isrg_root_pem.issuer == isrg_root_pem.subject
|