#14905·algo

Split openssl.yml into smaller focused files

Author: dguidoCreated Nov 28, 2025Updated Nov 28, 2025

Summary

roles/strongswan/tasks/openssl.yml is 283 lines handling 5+ responsibilities. Split into focused files for maintainability.

Current State

Single file handling:

  • CA certificate generation
  • Server certificate generation
  • Client certificates
  • CRL generation
  • p12 file generation

Proposed Structure

roles/strongswan/tasks/
├── openssl.yml              # Main orchestration (import only)
├── openssl_ca.yml           # CA certificate generation (~60 lines)
├── openssl_server.yml       # Server certificate (~40 lines)
├── openssl_clients.yml      # Client certificates (~80 lines)
└── openssl_distribution.yml # p12 and CRL generation (~60 lines)

Benefits

  • Each file has single responsibility
  • Easier to test individual components
  • Easier to understand and maintain
  • Reduces cognitive load when debugging certificate issues