Merge branch 'master' of git.fsmpi.rwth-aachen.de:infra/ansible

common/tasks/tls.yml

@@ -7,28 +7,13 @@
     - packages
     - tls
 
-- name: ensure RWTH CA chains are installed
+- name: ensure the sha2 rwth chain is available
   copy:
-    src: "{{item}}.pem"
-    dest: "/etc/ssl/certs/{{item}}.pem"
-    owner: root
-    group: root
-    mode: 0644
-  with_items:
-    - rwth_chain_sha1
-    - rwth_chain_sha2
-  tags:
-    - tls
-    - rwth
-
-- name: ensure we symlink the default RWTH CA chain
-  file:
-    src: /etc/ssl/certs/rwth_chain_sha1.pem
+    src: rwth_chain_sha2.pem
     dest: /etc/ssl/certs/rwth_chain.pem
-    state: link
     owner: root
     group: root
-    force: yes
+    mode: 0644
   tags:
     - tls
     - rwth