Skip to content

Split openssl.yml into smaller focused files #14905

@dguido

Description

@dguido

Summary

roles/strongswan/tasks/openssl.yml is 283 lines handling 5+ responsibilities. Split into focused files for maintainability.

Current State

Single file handling:

  • CA certificate generation
  • Server certificate generation
  • Client certificates
  • CRL generation
  • p12 file generation

Proposed Structure

roles/strongswan/tasks/
├── openssl.yml              # Main orchestration (import only)
├── openssl_ca.yml           # CA certificate generation (~60 lines)
├── openssl_server.yml       # Server certificate (~40 lines)
├── openssl_clients.yml      # Client certificates (~80 lines)
└── openssl_distribution.yml # p12 and CRL generation (~60 lines)

Benefits

  • Each file has single responsibility
  • Easier to test individual components
  • Easier to understand and maintain
  • Reduces cognitive load when debugging certificate issues

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions