Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

base: try changing f33 crypto-policies to a less open version to get 2fa working

Browse source 
LEGACY allows all kinds of old junk, lets try and just
enable the things that FEDORA32 allowed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-11-03 14:10:39 -08:00
parent 6de5698aa6
commit e5606578de
2 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/base/tasks/crypto-policies.yml
View file

@ -17,8 +17,8 @@
- base/crypto-policies
- name: Set crypto-policy on fedora 33 and higher hosts to allow 2fa to work
command: "update-crypto-policies --set LEGACY"
when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('LEGACY') == -1 or cryptopolicyapplied.rc != 0)"
command: "update-crypto-policies --set DEFAULT:FEDORA32"
when: "ansible_distribution_major_version|int >= 33 and (currentcryptopolicy.stdout.find('DEFAULT:FEDORA32') == -1 or cryptopolicyapplied.rc != 0)"
tags:
- crypto-policies
- base/crypto-policies

1
roles/base/templates/crypto-policies-config
View file

@ -1 +0,0 @@
LEGACY