�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
m Z m Z m
Z
d d l m Z d
� Z e d k r� e � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys�
---
module: acme_account
author: "Felix Fontein (@felixfontein)"
version_added: "2.6"
short_description: Create, modify or delete ACME accounts
description:
- "Allows to create, modify or delete accounts with a CA supporting the
L(ACME protocol,https://tools.ietf.org/html/rfc8555),
such as L(Let's Encrypt,https://letsencrypt.org/)."
- "This module only works with the ACME v2 protocol."
notes:
- "The M(acme_certificate) module also allows to do basic account management.
When using both modules, it is recommended to disable account management
for M(acme_certificate). For that, use the C(modify_account) option of
M(acme_certificate)."
seealso:
- name: Automatic Certificate Management Environment (ACME)
description: The specification of the ACME protocol (RFC 8555).
link: https://tools.ietf.org/html/rfc8555
- module: acme_account_info
description: Retrieves facts about an ACME account.
- module: openssl_privatekey
description: Can be used to create a private account key.
- module: acme_inspect
description: Allows to debug problems.
extends_documentation_fragment:
- acme
options:
state:
description:
- "The state of the account, to be identified by its account key."
- "If the state is C(absent), the account will either not exist or be
deactivated."
- "If the state is C(changed_key), the account must exist. The account
key will be changed; no other information will be touched."
type: str
required: true
choices:
- present
- absent
- changed_key
allow_creation:
description:
- "Whether account creation is allowed (when state is C(present))."
type: bool
default: yes
contact:
description:
- "A list of contact URLs."
- "Email addresses must be prefixed with C(mailto:)."
- "See U(https://tools.ietf.org/html/rfc8555#section-7.3)
for what is allowed."
- "Must be specified when state is C(present). Will be ignored
if state is C(absent) or C(changed_key)."
type: list
elements: str
default: []
terms_agreed:
description:
- "Boolean indicating whether you agree to the terms of service document."
- "ACME servers can require this to be true."
type: bool
default: no
new_account_key_src:
description:
- "Path to a file containing the ACME account RSA or Elliptic Curve key to change to."
- "Same restrictions apply as to C(account_key_src)."
- "Mutually exclusive with C(new_account_key_content)."
- "Required if C(new_account_key_content) is not used and state is C(changed_key)."
type: path
new_account_key_content:
description:
- "Content of the ACME account RSA or Elliptic Curve key to change to."
- "Same restrictions apply as to C(account_key_content)."
- "Mutually exclusive with C(new_account_key_src)."
- "Required if C(new_account_key_src) is not used and state is C(changed_key)."
type: str
sf
- name: Make sure account exists and has given contacts. We agree to TOS.
acme_account:
account_key_src: /etc/pki/cert/private/account.key
state: present
terms_agreed: yes
contact:
- mailto:[email protected]
- mailto:[email protected]
- name: Make sure account has given email address. Don't create account if it doesn't exist
acme_account:
account_key_src: /etc/pki/cert/private/account.key
state: present
allow_creation: no
contact:
- mailto:[email protected]
- name: Change account's key to the one stored in the variable new_account_key
acme_account:
account_key_src: /etc/pki/cert/private/account.key
new_account_key_content: '{{ new_account_key }}'
state: changed_key
- name: Delete account (we have to use the new key)
acme_account:
account_key_content: '{{ new_account_key }}'
state: absent
sq
account_uri:
description: ACME account URI, or None if account does not exist.
returned: always
type: str
( t ModuleFailExceptiont ACMEAccountt set_crypto_backend( t
AnsibleModulec % C` se t d t d t d d d d g � d t d d d t � d
t d d � d t d d d d
� d t d d d d d d d g � d t d d d t � d t d d d t � d t d d d t d d d d g � d t d d d t � d t d d d d d g � d t d d � d t d d d t � d! t d d d d" d d" d# d$ g � �
d% d d g f d& d d g d d g f d' d d d d g t g f d( t � } t | � | j j d � s�| j d) d* d+ d, � n | j j d � d k r�| j d- d. � n yJt | � } t } | j j d � } i } i } | d k r| j
d t � \ } } | rqt | � } | j d/ | d0 <n | r�t d1 � � n | d k r�| j s�i d2 d3 6} | j | j | � \ } }
|
d3 d4 k r�t d5 j |
d3 | � � � q�n t } q�n�| d k r| j j d � } g | j j d � D] } t | � ^ q2}
| j j d � } | j
|
d | d | �\ } } | d k r�t d- d6 � � n | r�i } n t | � } | j d/ | d0 <t } | s�| j | |
� \ } } n | p�| } t | � } | j d/ | d0 <n�| d k r�| j | j j d � | j j d � � \ } } | rot d7 | � � n | j
d t � \ } } | r�t d1 � � n | d k r�t d- d6 � � n t | � } | j d/ | d0 <| j s�| j d8 } i | d9 d9 6| d/ d/ 6| d: 6} i | j d; 6| d/ d< 6| j d= 6} | j | | | � } | j | | � \ } }
|
d3 d4 k r�t d> j |
d3 | � � � n | j r�| | _ | d9 | j d9 <| j � } q�n | j r�t | � } n | d/ | d0 <t } n i | d? 6| j d
6} | j r0i | d@ 6| dA 6| dB <n | j | � Wn t k
r`} | j | � n Xd S(C Nt
argument_spect account_key_srct typet patht aliasest account_keyt account_key_contentt strt no_logt account_urit acme_directoryt defaults2 https://acme-staging.api.letsencrypt.org/directoryt acme_versiont inti t choicesi t validate_certst boolt terms_agreedt statet requiredt absentt presentt changed_keyt allow_creationt contactt listt elementst new_account_key_srct new_account_key_contentt select_crypto_backendt autot opensslt cryptographyt required_one_oft mutually_exclusivet required_ift supports_check_modet warningsH Disabling certificate validation for communications with ACME endpoint. sE This should only be done for testing against a local ACME server for s: development purposes, but *never* for production purposes.t msgs6 The acme_account module requires the ACME v2 protocol!t jwkt public_account_keys Unwanted account creationt deactivatedR i� s# Error deactivating account: {0} {1}s) Account does not exist or is deactivated.s# error while parsing account key: %st keyChanget algt urlt accountt newKeyt oldKeys# Error account key rollover: {0} {1}t changedt beforet aftert diff( R t dictt Truet FalseR
t paramst gett warnt fail_jsonR t
setup_accountt key_datat AssertionErrort Nonet
check_modet send_signed_requestt uriR t formatR t update_accountt parse_keyt directoryR3 t sign_requestt _difft
jws_headert get_account_datat exit_jsont do_fail( t moduleR9 R< R t diff_beforet
diff_aftert createdt account_datat payloadt resultt infoR# t vR$ R t updatedt errort new_key_dataR8 t protectedt datat e( ( sL /usr/lib/python2.7/site-packages/ansible/modules/crypto/acme/acme_account.pyt main� s� !$'
" +
t __main__N( t
__future__R R R R t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt ansible.module_utils.acmeR R R
t ansible.module_utils.basicR Rg t __name__( ( ( sL /usr/lib/python2.7/site-packages/ansible/modules/crypto/acme/acme_account.pyt <module> s
Q �
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell