coopdevs / coopdevs/zulip-role

[FEATURE] Automatic checking of existing valid SSL certificates

Open
#7 0 comments 0 reactions 2 assignees Claimed by @konykon View on GitHub
enhancement
Dominant language
No language data
Stars
2
Forks
2
Avg merge
1d 13h
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**
When running the playbook against a host that already has a previous deployment with an SSL certificate issued from the role, the `certbot` asks for interaction to choose whether it should keep the existing certificate or renew it; this causes the role to hang as it does not expect any interaction.

```
What do you want to do?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Keep the existing certificate for now
2: Renew and replace the certificate (may be subject to CA fee limits)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
```

**Describe your desired solution**
An automated check for existing, valid, and matching certificates for the host.

**Describe the alternatives you have considered**
For now, it is possible to skip certificate generation by setting the `ssl` variable of the role to an empty string.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.