Mirrors/ansible-collection-famedly-matrix
2
0
Fork 0
mirror of https://github.com/famedly/ansible-collection-matrix synced 2024-11-10 13:44:16 +00:00
Code Issues Projects Releases Packages Wiki Activity

Use the builtin openssl dhparam module instead of the openssl command

Browse source
This commit is contained in:
Emmanouil Kampitakis 2018-12-03 23:28:34 +01:00
parent 76b0223b7e
commit dc85581dfa
1 changed files with 17 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
tasks/ssl.yml
View file

@ -1,9 +1,20 @@
---
- name: Create signing key
shell: >
/opt/synapse/env/bin/python -c "
from signedjson import key;
with open('/opt/synapse/ssl/{{ matrix_synapse_domain}}.signing.key','w') as file:
key.write_signing_keys(file, [key.generate_signing_key('first')]);
"
args:
creates: /opt/synapse/ssl/{{ matrix_synapse_domain }}.signing.key
become: true
become_user: synapse
notify:
- "restart synapse"
- name: create DH parameters
command: openssl dhparam -out ssl/{{ matrix_synapse_domain }}.dh 2048
args:
creates: /opt/synapse/ssl/{{ matrix_synapse_domain }}.dh
chdir: /opt/synapse
become_user: synapse
become: true
openssl_dhparam:
path: "/opt/synapse/ssl/{{ matrix_synapse_domain }}.dh"
owner: synapse