22.2. 使用 Ansible 为 IdM 主机、服务和用户撤销 SSL 证书

流程

1. 使用以下内容创建 Ansible playbook 文件 revoke-certificate.yml ：

   ---
   - name: Playbook to revoke a certificate
     hosts: ipaserver
   
     vars_files:
     - /home/user_name/MyPlaybooks/secret.yml
   
     tasks:
     - name: Revoke a certificate for a web server
       ipacert:
         ipaadmin_password: "{{ ipaadmin_password }}"
         serial_number: 123456789
         revocation_reason: "keyCompromise"
         state: revoked

   Copy to Clipboard Toggle word wrap

2. 撤销证书：

   $ ansible-playbook --vault-password-file=password_file -v -i <path_to_inventory_directory>/hosts <path_to_playbooks_directory>/revoke-certificate.yml

   Copy to Clipboard Toggle word wrap