From 802bad48e6efa7ceab2fe17db43810ed4343db50 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Benedikt=20B=C3=B6hm?= Date: Thu, 20 Oct 2022 14:44:14 +0200 Subject: [PATCH] do not manage trusted user ca keys if none exist (#580) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Benedikt Böhm Signed-off-by: Benedikt Böhm --- roles/ssh_hardening/tasks/hardening.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/roles/ssh_hardening/tasks/hardening.yml b/roles/ssh_hardening/tasks/hardening.yml index e370dbec..29aaa746 100644 --- a/roles/ssh_hardening/tasks/hardening.yml +++ b/roles/ssh_hardening/tasks/hardening.yml @@ -110,7 +110,9 @@ - name: Include tasks to setup ca keys and principals include_tasks: ca_keys_and_principals.yml - when: ssh_trusted_user_ca_keys_file | length > 0 + when: + - ssh_trusted_user_ca_keys_file | length > 0 + - ssh_trusted_user_ca_keys | length > 0 - name: Include selinux specific tasks include_tasks: selinux.yml