Depend on openssl for certificate generation.

molecule/default/prepare.yml

@@ -9,3 +9,7 @@
     - role: robertdebock.epel
     - role: robertdebock.buildtools
     - role: robertdebock.python_pip
+    - role: robertdebock.openssl
+      openssl_items:
+        - name: apache-httpd
+          common_name: "{{ ansible_fqdn }}"

requirements.yml

@@ -2,5 +2,6 @@
 - robertdebock.bootstrap
 - robertdebock.buildtools
 - robertdebock.epel
+- robertdebock.openssl
 - robertdebock.python_pip
 - robertdebock.selinux

tasks/main.yml

@@ -1,13 +1,5 @@
 ---
 # tasks file for httpd
-- name: install requirements
-  pip:
-    name: "{{ httpd_requirements }}"
-    state: present
-  register: httpd_install_requirements
-  until: httpd_install_requirements is succeeded
-  retries: 3
-
 - name: install apache httpd
   package:
     name: "{{ httpd_packages }}"
@@ -39,30 +31,6 @@
     - "{{ httpd_port }}"
     - "{{ httpd_ssl_port }}"
 
-- name: create ssl directory
-  file:
-    path: "{{ httpd_config_directory }}/ssl"
-    state: directory
-
-- name: create ssl key
-  openssl_privatekey:
-    path: "{{ httpd_config_directory }}/ssl/{{ httpd_ssl_servername }}.key"
-  register: httpd_key
-
-- name: create ssl csr
-  openssl_csr:
-    path: "{{ httpd_config_directory }}/ssl/{{ httpd_ssl_servername }}.csr"
-    privatekey_path: "{{ httpd_key.filename }}"
-    common_name: "{{ httpd_ssl_servername }}"
-  register: httpd_csr
-
-- name: create ssl certificates
-  openssl_certificate:
-    path: "{{ httpd_config_directory }}/ssl/{{ httpd_ssl_servername }}.crt"
-    privatekey_path: "{{ httpd_csr.privatekey }}"
-    csr_path: "{{ httpd_csr.filename }}"
-    provider: selfsigned
-
 - name: configure ssl
   template:
     src: ssl.conf.j2

templates/ssl.conf.j2

@@ -6,6 +6,6 @@ Listen {{ httpd_ssl_port }}
 <VirtualHost *:{{ httpd_ssl_port }}>
     ServerName {{ httpd_ssl_servername }}
     SSLEngine on
-    SSLCertificateFile "{{ httpd_config_directory }}/ssl/{{ httpd_ssl_servername }}.crt"
-    SSLCertificateKeyFile "{{ httpd_config_directory }}/ssl/{{ httpd_ssl_servername }}.key"
+    SSLCertificateFile "{{ httpd_openssl_crt_directory }}/apache-httpd.crt"
+    SSLCertificateKeyFile "{{ httpd_openssl_key_directory }}/apache-httpd.key"
 </VirtualHost>

vars/main.yml

@@ -1,8 +1,5 @@
 ---
 # vars file for httpd
-httpd_requirements:
-  - pyopenssl
-
 httpd_sebooleans:
   - httpd_can_network_connect
 
@@ -94,3 +91,21 @@ _httpd_binary:
   Debian: apachectl
 
 httpd_binary: "{{ _httpd_binary[ansible_os_family] | default(_httpd_binary['default']) }}"
+
+_httpd_openssl_key_directory:
+  default: /tmp
+  Alpine: /etc/ssl/private
+  Debian: /etc/ssl/private
+  RedHat: /etc/pki/tls/private
+  Suse: /etc/ssl/private
+
+httpd_openssl_key_directory: "{{ _httpd_openssl_key_directory[ansible_os_family] | default(_httpd_openssl_key_directory['default']) }}"
+
+_httpd_openssl_crt_directory:
+  default: /tmp
+  Alpine: /etc/ssl/certs
+  Debian: /etc/ssl/certs
+  RedHat: /etc/pki/tls/certs
+  Suse: /etc/ssl/certs
+
+httpd_openssl_crt_directory: "{{ _httpd_openssl_crt_directory[ansible_os_family] | default(_httpd_openssl_crt_directory['default']) }}"