Skip to content

Split openssl.yml into smaller focused files #14905

@dguido

Description

@dguido

Summary

roles/strongswan/tasks/openssl.yml is 283 lines handling 5+ responsibilities. Split into focused files for maintainability.

Current State

Single file handling:

  • CA certificate generation
  • Server certificate generation
  • Client certificates
  • CRL generation
  • p12 file generation

Proposed Structure

roles/strongswan/tasks/
├── openssl.yml              # Main orchestration (import only)
├── openssl_ca.yml           # CA certificate generation (~60 lines)
├── openssl_server.yml       # Server certificate (~40 lines)
├── openssl_clients.yml      # Client certificates (~80 lines)
└── openssl_distribution.yml # p12 and CRL generation (~60 lines)

Benefits

  • Each file has single responsibility
  • Easier to test individual components
  • Easier to understand and maintain
  • Reduces cognitive load when debugging certificate issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions