-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Open
Description
Summary
roles/strongswan/tasks/openssl.yml is 283 lines handling 5+ responsibilities. Split into focused files for maintainability.
Current State
Single file handling:
- CA certificate generation
- Server certificate generation
- Client certificates
- CRL generation
- p12 file generation
Proposed Structure
roles/strongswan/tasks/
├── openssl.yml # Main orchestration (import only)
├── openssl_ca.yml # CA certificate generation (~60 lines)
├── openssl_server.yml # Server certificate (~40 lines)
├── openssl_clients.yml # Client certificates (~80 lines)
└── openssl_distribution.yml # p12 and CRL generation (~60 lines)
Benefits
- Each file has single responsibility
- Easier to test individual components
- Easier to understand and maintain
- Reduces cognitive load when debugging certificate issues
Metadata
Metadata
Assignees
Labels
No labels