diff options
| author | Matt Martz <matt@sivel.net> | 2021-10-07 14:04:48 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-10-08 05:04:48 +1000 |
| commit | 8510db4935a27fd190614a2cb7d41628a0f24def (patch) | |
| tree | 8a811bbd4fb003a5eb19ad708b84e7f4c7bd456f /test/integration/targets/uri | |
| parent | 23b9d197ebf8e281965003675ae480bc09264e99 (diff) | |
| download | ansible-8510db4935a27fd190614a2cb7d41628a0f24def.tar.gz | |
Allow ca_path to point to a bundle (#75894)
* Allow ca_path to point to a bundle. Fixes #75015
Diffstat (limited to 'test/integration/targets/uri')
| -rw-r--r-- | test/integration/targets/uri/tasks/main.yml | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/test/integration/targets/uri/tasks/main.yml b/test/integration/targets/uri/tasks/main.yml index 700e7f1017..a91c425db7 100644 --- a/test/integration/targets/uri/tasks/main.yml +++ b/test/integration/targets/uri/tasks/main.yml @@ -173,6 +173,25 @@ - result is failed - "'certificate verify failed' in result.msg" +- name: Locate ca-bundle + stat: + path: '{{ item }}' + loop: + - /etc/ssl/certs/ca-bundle.crt + - /etc/ssl/certs/ca-certificates.crt + - /var/lib/ca-certificates/ca-bundle.pem + - /usr/local/share/certs/ca-root-nss.crt + - '{{ macos_cafile.stdout_lines|default(["/_i_dont_exist_ca.pem"])|first }}' + - /etc/ssl/cert.pem + register: ca_bundle_candidates + +- name: Test that ca_path can be a full bundle + uri: + url: "https://{{ httpbin_host }}/get" + ca_path: '{{ ca_bundle }}' + vars: + ca_bundle: '{{ ca_bundle_candidates.results|selectattr("stat.exists")|map(attribute="item")|first }}' + - name: test redirect without follow_redirects uri: url: 'https://{{ httpbin_host }}/redirect/2' |