124 lines
4.1 KiB
YAML
124 lines
4.1 KiB
YAML
---
|
|
# Copyright (c) Ansible Project
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
# The tests for this module generate unsafe parameters for testing purposes;
|
|
# otherwise tests would be too slow. Use sizes of at least 2048 in production!
|
|
- name: "[{{ select_crypto_backend }}] Generate parameter (check mode)"
|
|
openssl_dhparam:
|
|
size: 768
|
|
path: '{{ remote_tmp_dir }}/dh768.pem'
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
return_content: yes
|
|
check_mode: true
|
|
register: dhparam_check
|
|
|
|
- name: "[{{ select_crypto_backend }}] Generate parameter"
|
|
openssl_dhparam:
|
|
size: 768
|
|
path: '{{ remote_tmp_dir }}/dh768.pem'
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
return_content: yes
|
|
register: dhparam
|
|
|
|
- name: "[{{ select_crypto_backend }}] Don't regenerate parameters with no change (check mode)"
|
|
openssl_dhparam:
|
|
size: 768
|
|
path: '{{ remote_tmp_dir }}/dh768.pem'
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
return_content: yes
|
|
check_mode: true
|
|
register: dhparam_changed_check
|
|
|
|
- name: "[{{ select_crypto_backend }}] Don't regenerate parameters with no change"
|
|
openssl_dhparam:
|
|
size: 768
|
|
path: '{{ remote_tmp_dir }}/dh768.pem'
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
return_content: yes
|
|
register: dhparam_changed
|
|
|
|
- name: "[{{ select_crypto_backend }}] Generate parameters with size option"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh512.pem'
|
|
size: 512
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
|
|
- name: "[{{ select_crypto_backend }}] Don't regenerate parameters with size option and no change"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh512.pem'
|
|
size: 512
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_changed_512
|
|
|
|
- copy:
|
|
src: '{{ remote_tmp_dir }}/dh768.pem'
|
|
remote_src: yes
|
|
dest: '{{ remote_tmp_dir }}/dh512.pem'
|
|
|
|
- name: "[{{ select_crypto_backend }}] Re-generate if size is different"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh512.pem'
|
|
size: 512
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_changed_to_512
|
|
|
|
- name: "[{{ select_crypto_backend }}] Force re-generate parameters with size option"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh512.pem'
|
|
size: 512
|
|
force: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_changed_force
|
|
|
|
- name: "[{{ select_crypto_backend }}] Create broken params"
|
|
copy:
|
|
dest: "{{ remote_tmp_dir }}/dhbroken.pem"
|
|
content: "broken"
|
|
- name: "[{{ select_crypto_backend }}] Regenerate broken params"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dhbroken.pem'
|
|
size: 512
|
|
force: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: output_broken
|
|
|
|
- name: "[{{ select_crypto_backend }}] Generate params"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh_backup.pem'
|
|
size: 512
|
|
backup: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_backup_1
|
|
- name: "[{{ select_crypto_backend }}] Generate params (idempotent)"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh_backup.pem'
|
|
size: 512
|
|
backup: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_backup_2
|
|
- name: "[{{ select_crypto_backend }}] Generate params (change)"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh_backup.pem'
|
|
size: 512
|
|
force: yes
|
|
backup: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_backup_3
|
|
- name: "[{{ select_crypto_backend }}] Generate params (remove)"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh_backup.pem'
|
|
state: absent
|
|
backup: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
return_content: yes
|
|
register: dhparam_backup_4
|
|
- name: "[{{ select_crypto_backend }}] Generate params (remove, idempotent)"
|
|
openssl_dhparam:
|
|
path: '{{ remote_tmp_dir }}/dh_backup.pem'
|
|
state: absent
|
|
backup: yes
|
|
select_crypto_backend: "{{ select_crypto_backend }}"
|
|
register: dhparam_backup_5
|