base / crypto-policies: move fedora instances back to DEFAULT

We changed this to DEFAULT:FEDORA32 a while back because the certs for
the old totpcgi sudo needed it to work. Now thats all gone and we are
100% on ipa and sssd, this should no longer be needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-06-06 14:10:20 -07:00
parent b86863676e
commit 92867b50a2

View file

@ -18,9 +18,9 @@
- crypto-policies
- base/crypto-policies
- name: Set crypto-policy on fedora 33 and higher hosts to allow 2fa to work
command: "update-crypto-policies --set DEFAULT:FEDORA32"
when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('DEFAULT:FEDORA32') == -1 or cryptopolicyapplied.rc != 0)"
- name: Set crypto-policy on fedora 33 and higher hosts back to default
command: "update-crypto-policies --set DEFAULT"
when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('DEFAULT') == -1 or cryptopolicyapplied.rc != 0)"
check_mode: no
tags:
- crypto-policies