get_certificate extend starttls options

[C-F-A]

SUMMARY

get_certificate option starttls currently only supports mysql.
This seems to be introduced with Pull Request #264

Would be great to extend this to more protocols to be more usefull.

Looking at openssl, there are many more options available:

$ openssl version
OpenSSL 3.0.7 1 Nov 2022 (Library: OpenSSL 3.0.7 1 Nov 2022)
$ openssl s_client -connect 10.10.10.10 -starttls xxx
s_client: Value must be one of:
smtp
pop3
imap
ftp
xmpp
xmpp-server
telnet
irc
mysql
postgres
lmtp
nntp
sieve
ldap

ISSUE TYPE

• Feature Idea

COMPONENT NAME

plugins/modules/get_certificate.py

ADDITIONAL INFORMATION

Certificate Check with STARTTLS option is currently only possible with mysql. Other protocols like FTP or SMTP are currently not possible to verirfy.

[felixfontein]

The module does not use the openssl binary, so this would have to be explicitly (re-)implemented. I'm happy to review PRs if someone wants to work on this (or at least one or some of these).