From 4c91f424c6a16421fd4dd57eeead53aa47cfe991 Mon Sep 17 00:00:00 2001
From: Brice Waegeneire <bwaegeneire+git@evolix.fr>
Date: Thu, 21 Sep 2023 16:56:01 +0200
Subject: [PATCH] Revert "pki: fix conventions and idioms"

This reverts commit dfe2448e8691908e3be5de5938d35967f0edd2f7.

Implementation too inflexible. Try again!
---
 pki/tasks/main.yml | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

diff --git a/pki/tasks/main.yml b/pki/tasks/main.yml
index 55ef9be1..f4d78ceb 100644
--- a/pki/tasks/main.yml
+++ b/pki/tasks/main.yml
@@ -6,29 +6,27 @@
   apt:
     name: python-cryptography
     state: present
-  when: ansible_python_version is version('3', '<')
+  when: ansible_python['executable'] == "/usr/bin/python"
 
 - name: Install python 3 cryptography
   apt:
     name: python3-cryptography
     state: present
-  when: ansible_python_version is version('3', '>=')
+  when: ansible_python['executable'] == "/usr/bin/python3"
 
 - name: Creates PKI tree directories
   file:
     path: "{{ item }}"
-    mode: "0700"
+    mode: 0700
     state: directory
   loop:
     - "{{ pki_dir }}/certs"
     - "{{ pki_dir }}/private"
 
 
-# Create Certificate Authority (CA)
+# Create Certificat Authority (CA)
 - include: ca.yml
-  when:
-    - not ansible_check_mode
-    - inventory_hostname == pki_ca_host
+  when: inventory_hostname == pki_ca_host and not ansible_check_mode
 
 
 # Create a certificate signed by the CA