From 0c13eb94889f023b309239cf16dec4aac33be33c Mon Sep 17 00:00:00 2001
From: AnsibleGuy <guy@ansibleguy.net>
Date: Sat, 20 Jul 2024 17:14:59 +0200
Subject: [PATCH] allow certificates without passwords (#1)

---
 tasks/instance/certs/manage.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/instance/certs/manage.yml b/tasks/instance/certs/manage.yml
index b1bc689..013a63c 100644
--- a/tasks/instance/certs/manage.yml
+++ b/tasks/instance/certs/manage.yml
@@ -11,7 +11,7 @@
 - name: "{{ task_prefix_cert }} | '{{ pki_cert_name }}' | Checking certificate config"
   ansible.builtin.assert:
     that:
-      - pki_cert_pwd | meets_password_complexity(PKI_HC)
+      - pki_cert_pwd | default(none, true) is none or pki_cert_pwd | meets_password_complexity(PKI_HC)
       - pki_cert_cnf.req.country | default('', true) | length < 3
   vars:
     pki_cert_pwd: "{{ pki_cert_cnf.pwd | default(pki_cnf_subca.pwd_cert) | default('') }}"