Add ssl_certificate_deploy module

[shindman]

• New module for secure SSL certificate deployment
• Supports nginx, httpd, and apache2 web services
• Automatic SSL configuration detection and parsing
• Certificate validation and key matching
• Service configuration testing with rollback
• Comprehensive audit logging and backup functionality
• Passes all ansible-test sanity checks

SUMMARY

This PR introduces a new module ssl_certificate_deploy for secure SSL certificate deployment to web services with comprehensive validation and rollback capabilities.

Key Features:

• Automatic Service Detection: Detects running nginx, httpd, and apache2 web services
• Configuration Parsing: Automatically finds SSL certificate paths in configuration files
• Multi-file Support: Handles separate certificate, private key, and chain files
• Pre-deployment Validation: Validates certificate-key compatibility using OpenSSL before deployment
• Configuration Testing: Tests web service configuration with new certificates and rolls back on failure
• Secure Operations: Creates timestamped backups, validates file permissions, prevents path traversal attacks
• Comprehensive Audit Trail: Generates detailed JSON reports with operation results
• Zero-downtime Deployment: Service reloading only after successful validation

Security Features:

• Certificate-key matching validation using OpenSSL
• Temporary file-based validation before production deployment
• Automatic rollback on configuration test failures
• SHA256 hash comparison to prevent unnecessary changes
• Secure file permissions and ownership management

This module addresses the common challenge of SSL certificate renewal in production environments where manual errors can cause service outages. It provides enterprise-grade reliability with multiple validation layers and comprehensive rollback capabilities.

The module has been thoroughly tested and passes all ansible-test sanity checks with no errors.

ISSUE TYPE

• New Module/Plugin Pull Request

COMPONENT NAME

ssl_certificate_deploy

ADDITIONAL INFORMATION

Module Capabilities:

• Web Services Supported: nginx, httpd/apache2
• Certificate Types: SSL certificates, private keys, certificate chains
• Validation Methods: OpenSSL certificate validation, certificate-key matching, service configuration testing
• Backup Strategy: Timestamped backups with configurable retention
• Audit Features: JSON audit reports with SHA256 hashes and operation details

Use Cases:

1. Automated Certificate Renewal: Integration with Let's Encrypt or internal CA systems
2. Multi-service Deployments: Single task to update certificates across multiple web services
3. Production Deployments: Safe certificate updates with validation and rollback
4. Compliance Requirements: Comprehensive audit trails for certificate management

Testing Performed:

ansible-test sanity plugins/modules/web_infrastructure/ssl_certificate_deploy.py --docker default
All sanity tests pass (0 errors)
PEP8 compliance verified
Documentation format validated
Module standards compliance confirmed

Configuration Examples:

# Basic usage - automatic detection
- name: Deploy SSL certificates
  ssl_certificate_deploy:
    src: /path/to/new_cert.pem

# Advanced usage - separate files with strict validation
- name: Deploy with separate cert, key, and chain
  ssl_certificate_deploy:
    src: /path/to/cert.pem
    key_src: /path/to/private.key
    chain_src: /path/to/chain.pem
    strict_validation: true
    validate_config: true


### Return Values Include:
- List of detected services
- Updated certificate paths
- Backup file locations
- Service reload status
- Configuration validation results
- Comprehensive audit report path

The module follows Ansible best practices for idempotency, check mode support, and comprehensive error handling.

<img width="956" height="482" alt="Json-LogOutput" src="https://github.com/user-attachments/assets/a2191270-31a4-4b31-9274-8af34125ae46" />
<img width="1902" height="883" alt="Output" src="https://github.com/user-attachments/assets/0ab0b10c-c9df-482d-8924-2b9c9a81cba8" />
<img width="1606" height="817" alt="Sanity-Test" src="https://github.com/user-attachments/assets/de304616-40aa-40f4-952b-7378d06cd3bf" />

[russoz]

Yet another AI-generated module? Super verbose, outside conventions, simple things likely over-engineered and important things likely neglected.

Will review this later. Sigh.