Use selfsigned webserver certificates until real certificates are provided

Author: vmcj

provision-contest/ansible/Makefile

@@ -10,6 +10,8 @@ default:
 
 LIBVENDORTGZ=roles/domjudge_checkout/files/lib-vendor.tgz
 SSHKEY=roles/ssh/files/id_rsa
+SSL_DOMSERVER=roles/ssl/files/domserver
+SSL_DOMSERVER_FILES=$(addprefix $(SSL_DOMSERVER),.key .crt)
 SSL_LOCALHOST=roles/ssl/files/localhost
 SSL_LOCALHOST_FILES=$(addprefix $(SSL_LOCALHOST),.key .crt)
 SSL_GRAFANA=roles/grafana/files/ssl
@@ -28,10 +30,14 @@ domserver judgehost admin grafana cds scoreboard mgmt: %: %.yml hosts group_vars
 
 admin: $(SSL_LOCALHOST_FILES)
 grafana: $(SSL_GRAFANA_FILES)
+domserver: $(SSL_DOMSERVER_FILES)
 
 $(SSHKEY) $(SSHKEY).pub:
 	ssh-keygen -t rsa -f $(SSHKEY) -P ''
 
+$(SSL_DOMSERVER_FILES):
+	openssl req -x509 -nodes -newkey rsa:4096 -subj "/O=DOMjudge/CN=domjudge" \
+		-sha256 -days 365 -keyout $(SSL_DOMSERVER).key -out $(SSL_DOMSERVER).crt
 $(SSL_LOCALHOST_FILES):
 	openssl req -x509 -nodes -newkey rsa:4096 -subj "/O=DOMjudge/CN=localhost" \
 		-sha256 -days 365 -keyout $(SSL_LOCALHOST).key -out $(SSL_LOCALHOST).crt
@@ -44,6 +50,7 @@ clean:
 
 distclean: clean
 	rm -f $(SSHKEY) $(SSHKEY).pub
+	rm -f $(SSL_DOMSERVER_FILES)
 	rm -f $(SSL_LOCALHOST_FILES)
 	rm -f $(SSL_GRAFANA_FILES)