Skip to content
This repository has been archived by the owner on Feb 28, 2019. It is now read-only.

Work with HTTP/HTTPS #48

Open
orenbm opened this issue Sep 7, 2017 · 1 comment
Open

Work with HTTP/HTTPS #48

orenbm opened this issue Sep 7, 2017 · 1 comment

Comments

@orenbm
Copy link
Member

orenbm commented Sep 7, 2017

  • Get everything working in 3 options:
    • HTTTP
    • HTTPS without validating certs
    • HTTPS with validating certs

At this point the role works that way but in the plugin & module we don;t have the ability to work with SSL without validating certs

@CaptainFluffyToes
Copy link

CaptainFluffyToes commented Jun 21, 2018

I've been further testing and the Ansible role relies on the URI module to pass the hostfactory token to the Conjur instances. There is currently no option in the role to utilized the "client_cert" URI module parameter to allow for passing through a certificate that is self signed.

It would be great if there was logic in the role to determine if the certificate is self-signed and then pass it through to Conjur with https intact even though the certificate is untrusted. Similar to the --cacert curl option.

This mostly comes up in demo environments where we do not have a CA.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

2 participants