From 3ad638b65b1542099724dba9ffbe90787b67016c Mon Sep 17 00:00:00 2001
From: Anthony Perkins <anthony@acperkins.com>
Date: Thu, 9 Dec 2021 14:03:55 +0000
Subject: [PATCH] Enable legacy openssl ciphers for MSCHAPv2

---
 roles/el/tasks/legacy-openssl.yml | 37 +++++++++++++++++++++++++++++++
 roles/el/tasks/main.yml           |  1 +
 2 files changed, 38 insertions(+)
 create mode 100644 roles/el/tasks/legacy-openssl.yml

diff --git a/roles/el/tasks/legacy-openssl.yml b/roles/el/tasks/legacy-openssl.yml
new file mode 100644
index 0000000..91d2704
--- /dev/null
+++ b/roles/el/tasks/legacy-openssl.yml
@@ -0,0 +1,37 @@
+---
+# Copyright 2021 Anthony Perkins
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Enabling these legacy ciphers is required to use MSCHAPv2 for wireless
+# networks. The computer will need to be restarted for this change to take
+# effect.
+
+- name: Enable legacy_sect section
+  become: true
+  ansible.builtin.lineinfile:
+    path: /etc/pki/tls/openssl.cnf
+    regexp: '^#*\[legacy_sect\]'
+    line: '[legacy_sect]'
+- name: legacy = legacy_sect
+  become: true
+  ansible.builtin.lineinfile:
+    path: /etc/pki/tls/openssl.cnf
+    regexp: '^#*legacy = legacy_sect'
+    line: 'legacy = legacy_sect'
+- name: activate legacy_sect
+  become: true
+  ansible.builtin.lineinfile:
+    path: /etc/pki/tls/openssl.cnf
+    regexp: '^#*activate = 1'
+    line: 'activate = 1'
diff --git a/roles/el/tasks/main.yml b/roles/el/tasks/main.yml
index d86933a..da1cdbc 100644
--- a/roles/el/tasks/main.yml
+++ b/roles/el/tasks/main.yml
@@ -22,3 +22,4 @@
 - import_tasks: packagekit.yml
 - import_tasks: vscode.yml
 - import_tasks: zram.yml
+- import_tasks: legacy-openssl.yml