ansible

Commit Graph

Author	SHA1	Message	Date
Matt Clay	c32348088a	Remove conflicting integration test aliases. Modules and plugins can only have one integration test target associated with them. When there is a conflict between alias(es) and/or the target name, only one target will trigger on changes to the module or plugin.	5 years ago
Felix Fontein	16d4d2dba9	acme_certificate: add select_chain option (#60710 ) * Add select_alternate_chain option. * Fix docs. * Allow to match via subject key identifier and authority key identifier. * Simplify test. * Add comments. * Add tests. * Fix bugs. * Also consider main chain when searching for alternatives. * Bump version_added. * Rename select_alternate_chain -> select_chain.	5 years ago
Felix Fontein	039123ec6b	acme_account_info: retrieve orders (#59697 ) * Add retrieve_orders option. * Run acme_certificate tests also for acme_account_info; use acme_account_info to get list of orders. * Doing some quoting. * Improve returned description.	5 years ago
Felix Fontein	8b68feb67e	acme_certificate: allow to download alternate certificate chains (#56334 ) * Improve link handling. * Also fetch alternate certificate chains. * Add retrieve_all_alternates option. * Simplify code. * Forgot when condition. * Add tests for retrieve_all_alternates. * Fixes. * Moved utility function for link parsing to module_utils. * Fix grammar.	5 years ago
Felix Fontein	c50a75a41e	acme_: new test container, tests for IP certificates (#57530 ) Bump container version. * Use new URLs. * Add IP certificate tests. * Disable IPv6 IP from IP certificate. Background: in CI, the ACME test container apparently has no IPv6 support. Without IPv6 support, Pebble can't connect to validate, and thus validation fails.	6 years ago
Felix Fontein	d8d366ef37	ACME: using new acme-test-container (#44095 ) * Using new acme-test-container image. * Add test for cleaning account contacts.	6 years ago
Felix Fontein	aef16ee195	ACME: use Cryptography (if a new enough version is available) instead of OpenSSL (#42170 ) * Collecting PEM -> DER conversions. * Using cryptography instead of OpenSSL binary in some situations. * Moving key-to-disk writing for key content to parse_account_key. * Rename parse_account_key -> parse_key. * Move OpenSSL specific code for key parsing and request signing into global functions. * Also using cryptography for key parsing and request signing. * Remove assert statements. * Fixing handling of key contents for cryptography code path. * Allow to disable the use of cryptography. * Updating documentation. * 1.5 seems to work as well (earlier versions don't have EC sign function). Making Python 2.x adjustments. * Changing option to select_crypto_backend. * Python 2.6 compatibility. * Trying to test both backends separately for acme_account. * Also testing both backends separately for acme_certificate and acme_certificate_revoke. * Adding changelog entry which informs about select_crypto_backend option in case autodetect fails. * Fixing YAML.	6 years ago
Felix Fontein	7b7709ae75	ACME: support for TLS-ALPN-01 (#42158 ) * Added support for TLS-ALPN-01 verification. * Unrelated commit to re-trigger tests. * Added test for TLS-ALPN-01. * Try to remove to_bytes in the hope that binary data survives in Python 2. * Using Base64 encoding for TLS-ALPN-01 value.	6 years ago
Felix Fontein	e0e6fe5cf7	Forgot to include validations.	6 years ago
Felix Fontein	d4c16f51be	New acme_* integration test using ACME test docker container (#41626 ) * Using ACME test container for acme_account integration test. * Removing dependency on setup_openssl. Waiting for controller and Pebble. * More tinkering. * Reducing number of tries. * One more try. * Another try. * Added acme_certificate tests. * Removed double key. * Added tests for acme_certificate_revoke. * Making task names more meaningful (during certificate generation). * Using newer test container which integrates letsencrypt/pebble#137. Adding test for revoking certificate by its private key. * Using new version of Pebble which limits the random auth delay. * Simplifying certificates for revocation tests. * Reworking acme_certificate tests (there are now more, but they are faster). * Test whether account_key_content works. * Preparing TLS-ALPN-01 support. * Using official Ansible image of testing container on quay.io. * Bumping version. * Bumping version of test container to 1.1.0. * Adjusting to new CI group names. * Pass ACME simulator IP as playbook variable. * Let test plugin wait for controller and CA endpoints to become active. * Refactor common setup parts of tests to setup_acme. * _ -> dummy * Moving common obtain-cert.yml to setup_acme.	6 years ago

10 Commits (ce47785dd6aa72f8498436dec9f5b9058eb000f1)