2015-06-04 01:01:23 +08:00
|
|
|
---
|
2015-07-07 17:19:50 +08:00
|
|
|
- name: create nss directory for keystone certificates
|
2015-10-19 11:19:31 +08:00
|
|
|
file:
|
|
|
|
|
path: "{{ radosgw_nss_db_path }}"
|
|
|
|
|
state: directory
|
|
|
|
|
owner: root
|
|
|
|
|
group: root
|
|
|
|
|
mode: 0644
|
2015-06-04 01:01:23 +08:00
|
|
|
|
2015-07-07 17:19:50 +08:00
|
|
|
- name: create nss entries for keystone certificates
|
2015-06-04 01:01:23 +08:00
|
|
|
shell: "{{ item }}"
|
|
|
|
|
with_items:
|
|
|
|
|
- "openssl x509 -in /etc/keystone/ssl/certs/ca.pem -pubkey |certutil -d {{ radosgw_nss_db_path }} -A -n ca -t 'TCu,Cu,Tuw'"
|
|
|
|
|
- "openssl x509 -in /etc/keystone/ssl/certs/signing_cert.pem -pubkey | certutil -A -d {{ radosgw_nss_db_path }} -n signing_cert -t 'P,P,P'"
|
