Handle skipped certificate checks

Author: andre487

roles/https_proxy/tasks/main.yml

@@ -53,8 +53,8 @@
     megaproxy_certificate_needs_issue: >-
       {{
         not megaproxy_certificate.stat.exists or
-        (megaproxy_certificate_hostname_checks.results | default([]) | selectattr('rc', 'ne', 0) | list | length > 0) or
-        (megaproxy_certificate_hostname_checks.results | default([]) | selectattr('stdout', 'search', 'does NOT match certificate') | list | length > 0)
+        (megaproxy_certificate_hostname_checks.results | default([]) | selectattr('rc', 'defined') | selectattr('rc', 'ne', 0) | list | length > 0) or
+        (megaproxy_certificate_hostname_checks.results | default([]) | selectattr('stdout', 'defined') | selectattr('stdout', 'search', 'does NOT match certificate') | list | length > 0)
       }}
 
 - name: Create self-signed certificate directory

tests/test_https_proxy_role.py

@@ -25,3 +25,6 @@ def test_domain_certificate_detects_openssl_textual_mismatch() -> None:
 
     # OpenSSL 3.0 on the managed host prints a mismatch but exits with rc=0.
     assert "does NOT match certificate" in decision_task
+    # Skipped checks (for example self-signed TLS) have neither rc nor stdout.
+    assert "selectattr('rc', 'defined')" in decision_task
+    assert "selectattr('stdout', 'defined')" in decision_task