pki: Fix private key dir perms on OpenBSD

2022-10-06 15:25:30 +00:00 · 2022-10-06 15:25:30 +00:00 · fdfa5c29e5
commit fdfa5c29e5
parent 1996ec8f1a
1 changed files with 8 additions and 0 deletions
--- a/roles/pki/tasks/main.yml
+++ b/roles/pki/tasks/main.yml
@ -29,6 +29,14 @@
  ansible.builtin.set_fact:
    pki_cacert_hash: "{{ result.stdout }}"

+- name: fix private key directory permissions
+  ansible.builtin.file:
+    path: "{{ tls_private }}"
+    mode: 0750
+    owner: root
+    group: hostkey
+  when: ansible_system == "OpenBSD"
+
 - name: copy host certificate
  ansible.builtin.copy:
    src: "/srv/ca/certs/hosts/{{ inventory_hostname }}.crt"