From 5dae2832e083b9b0b21b893bc2e3afb7c80aab55 Mon Sep 17 00:00:00 2001
From: Pavel Raiskup <praiskup@redhat.com>
Date: Fri, 28 Jun 2019 09:35:48 +0200
Subject: [PATCH] roles/messaging: correct paths to certs/keys

---
 roles/messaging/base/tasks/main.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/roles/messaging/base/tasks/main.yml b/roles/messaging/base/tasks/main.yml
index 5f35138310..a6c594d841 100644
--- a/roles/messaging/base/tasks/main.yml
+++ b/roles/messaging/base/tasks/main.yml
@@ -17,7 +17,7 @@
   - fedora-messaging
 
 - name: "copy fedora messaging key for {{ item.username }}"
-  copy: src={{ private }}/files/rabbitmq/{{ env }}/pki/issued/{{ item.key }}{% if env == 'staging' %}.stg{% endif %}.key
+  copy: src={{ private }}/files/rabbitmq/{{ env }}/pki/private/{{ item.key }}{% if env == 'staging' %}.stg{% endif %}.key
         dest=/etc/pki/rabbitmq/{{ item.username }}/{{ item.key }}.key
         owner={{ item.username }} group=root mode={{ item.username }}
   with_items: "{{ messaging.certificates }}"
@@ -31,3 +31,11 @@
   with_items: "{{ messaging.certificates }}"
   tags:
   - fedora-messaging
+
+- name: "copy fedora messaging ca.crt for {{ item.username }} user"
+  copy: src={{ private }}/files/rabbitmq/{{ env }}/pki/ca.crt
+        dest=/etc/pki/rabbitmq/{{ item.username }}/ca.crt
+        owner={{ item.username }} group=root mode={{ item.username }}
+  with_items: "{{ messaging.certificates }}"
+  tags:
+  - fedora-messaging