---
- name: "SSL cert"
  hosts: target
  tasks:
    - name: "Install ca-certificates"
      apt:
        pkg: "{{ item }}"
        state: present
      with_items:
        - ca-certificates
      when: ansible_distribution == "Ubuntu"

    - name: "Install ca-certificates"
      portage:
        package: "{{ item }}"
        update: yes
        changed_use: yes
      with_items:
        - app-misc/ca-certificates
      when: ansible_distribution == "Gentoo"

    - name: "Create self-signed SSL cert"
      shell:
        cmd: |
          if [ ! -f "/etc/ssl/certs/{{ item }}.crt" ] && [ ! -f "/etc/ssl/private/{{ item }}.key" ]; then
              openssl req -x509 -nodes -sha256 -days 3650 -newkey rsa:4096 -keyout "/tmp/{{ item }}.key" -out "/tmp/{{ item }}.crt" <<EOF
          US
          New Jersey
          Basking Ridge
          Verizon Wireless
          Verizon Cloud Platform
          {{ item }}
          carlos.konstanski@verizonwireless.com
          EOF
              cp -f "/tmp/{{ item }}.crt" "/etc/ssl/certs/"
              cp -f "/tmp/{{ item }}.key" "/etc/ssl/private/"
              chmod 644 "/etc/ssl/certs/{{ item }}.crt"
              chown root: "/etc/ssl/certs/{{ item }}.crt"
              chmod 640 "/etc/ssl/private/{{ item }}.key"
              chown root: "/etc/ssl/private/{{ item }}.key"
          fi
        executable: /bin/bash
      with_items:
        - "{{ inventory_hostname }}"