ansible-ca-cert.yml

- name: make cert extra dir
  file: state=directory path=/usr/share/ca-certificates/extra

- name: Install cert
  copy: src=../../templates/worker/certificates/entrust_l1k.cer dest=/usr/share/ca-certificates/extra/entrust_l1k.cer

- name: Cert exists
  shell: grep "^entrust_l1k.cer" /etc/ca-certificates.conf | cat
  register: cert_exists

- name: Add certificates to config
  lineinfile:
    dest: /etc/ca-certificates.conf
    line: extra/entrust_l1k.cer
  when: cert_exists.stdout == ""

- name: Update cert index
  shell: /usr/sbin/update-ca-certificates