mirror of
https://github.com/ansible-collections/community.general.git
synced 2024-09-14 20:13:21 +02:00
90c067e947
* Improve error handling, in particular with respect to private key loading problems. * Add tests to validate that modules regenerate invalid input and don't crash. * Don't crash when input is invalid. * Create 'better' broken input. * Fix paths. * Simplifying pyOpenSSL error handling.
37 lines
1.1 KiB
YAML
37 lines
1.1 KiB
YAML
---
|
|
- name: Validate generated params
|
|
shell: 'openssl dhparam -in {{ output_dir }}/{{ item }}.pem -noout -check'
|
|
with_items:
|
|
- dh768
|
|
- dh512
|
|
|
|
- name: Get bit size of 768
|
|
shell: 'openssl dhparam -noout -in {{ output_dir }}/dh768.pem -text | head -n1 | sed -ne "s@.*(\\([[:digit:]]\{1,\}\\) bit).*@\\1@p"'
|
|
register: bit_size_dhparam
|
|
|
|
- name: Check bit size of default
|
|
assert:
|
|
that:
|
|
- bit_size_dhparam.stdout == "768"
|
|
|
|
- name: Get bit size of 512
|
|
shell: 'openssl dhparam -noout -in {{ output_dir }}/dh512.pem -text | head -n1 | sed -ne "s@.*(\\([[:digit:]]\{1,\}\\) bit).*@\\1@p"'
|
|
register: bit_size_dhparam_512
|
|
|
|
- name: Check bit size of default
|
|
assert:
|
|
that:
|
|
- bit_size_dhparam_512.stdout == "512"
|
|
|
|
- name: Check if changed works correctly
|
|
assert:
|
|
that:
|
|
- dhparam_changed is not changed
|
|
- dhparam_changed_512 is not changed
|
|
- dhparam_changed_to_512 is changed
|
|
- dhparam_changed_force is changed
|
|
|
|
- name: Verify that broken params will be regenerated
|
|
assert:
|
|
that:
|
|
- output_broken is changed
|