Fix PKCS#12 file creation (trailofbits#14558)

omgagg · Feb 4, 2023 · 904bf5e · 904bf5e
1 parent 651f949
commit 904bf5e
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/roles/strongswan/tasks/openssl.yml b/roles/strongswan/tasks/openssl.yml
@@ -155,10 +155,19 @@
  format: OpenSSH
  with_items: "{{ users }}"
 
+ - name: Gather the package facts
+ ansible.builtin.package_facts:
+ manager: auto
+
+ - name: Get OpenSSL version
+ set_fact:
+ openssl_version: "{{ ansible_facts.packages['openssl'][0]['version'] }}"
+
  - name: Build the client's p12
  shell: >
  umask 077;
  {{ openssl_bin }} pkcs12
+ {{ (openssl_version is version('3', '<=')) | ternary('-legacy', '') }}
  -in certs/{{ item }}.crt
  -inkey private/{{ item }}.key
  -export
@@ -175,6 +184,7 @@
  shell: >
  umask 077;
  {{ openssl_bin }} pkcs12
+ {{ (openssl_version is version('3', '<=')) | ternary('-legacy', '') }}
  -in certs/{{ item }}.crt
  -inkey private/{{ item }}.key
  -export