Files
@ 8d272d91d3d2
Branch filter:
Location: majic-ansible-roles/roles/backup_server/molecule/default/prepare.yml - annotation
8d272d91d3d2
671 B
text/x-yaml
MAR-165: Deploy Diffie-Helman parameters for LDAP server in the ldap_server role:
- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.
- Not relevant for Debian Strech because of a bug in the OpenLDAP
version it ships with.
- This should allow use of DHE ciphers with LDAP server.
- Generated DH parameters only help pick one of the parameters from
RFC-7919 (based on the size of generated ones).
- Make the cipher test lists distro-specific due to differences
between supported algorithms in respective GnuTLS versions.
ef201fa5ec5f ef201fa5ec5f ef201fa5ec5f ef201fa5ec5f 55d6b2e2f4f3 ef201fa5ec5f ef201fa5ec5f 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 8f3635c67934 ef201fa5ec5f 55d6b2e2f4f3 ef201fa5ec5f ef201fa5ec5f ef201fa5ec5f e75d5d4fba3b 55d6b2e2f4f3 55d6b2e2f4f3 ef201fa5ec5f ef201fa5ec5f ef201fa5ec5f 55d6b2e2f4f3 | ---
- name: Prepare
hosts: all
gather_facts: false
tasks:
- hosts: localhost
connection: local
tasks:
- name: Fix SSH client file permissions locally, otherwise we get error from SSH
file:
path: "{{ item }}"
mode: g=,o=
with_items:
- tests/data/ssh/client1
- tests/data/ssh/client2
- hosts: all
become: true
tasks:
- name: Install python for Ansible
raw: test -e /usr/bin/python3 || (apt -y update && apt install -y python3-minimal)
become: true
changed_when: false
- name: Update all caches to avoid errors due to missing remote archives
apt:
update_cache: true
|