- Move DH params test from Testinfra to post_tasks to workaround a limitation...

- Move DH params test from Testinfra to post_tasks to workaround a limitation when running tests with Docker.

tests/playbook.yml

@@ -5,3 +5,13 @@
 
 - hosts: all
   roles: [ ca-store ]
+  post_tasks:
+      - name: Get DH params bit count
+        dhparams:
+            path: /etc/ssl/dhparams.pem
+        register: ca_store_test_dhparams
+
+      - name: Verify high bit count DH params
+        assert:
+            that:
+                - ca_store_test_dhparams.bits >= 2048

tests/test_ca_store.py

@@ -49,12 +49,6 @@ def test_update_ca_certificates(File, Ansible, Command, Sudo,
         assert Command(filename).rc == 0
 
 
-def test_dh_params(File, Ansible):
-    assert File('/etc/ssl/dhparams.pem').is_file
-    assert int(Ansible('dhparams', 'path=/etc/ssl/dhparams.pem')[
-        "bits"]) >= 2048
-
-
 def test_snakeoil_cert(File):
     assert File('/etc/ssl/certs/ssl-cert-snakeoil.pem').is_file