blob: 53dc3b067f1d53609ae1e976867a3b4a4ae65c8c (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
---
selfsigned_cert_hostnames: "{{ x509_certificate_hostnames }}"
selfsigned_cert_name: "{{ x509_certificate_name | default(selfsigned_cert_hostnames[0]) }}"
selfsigned_cert_base_dir: "/etc/ssl"
# selfsigned_cert_config:
# path: "{{ selfsigned_cert_base_dir }}/{{ selfsigned_cert_name }}"
# mode: "0750"
# owner: root
# group: www-data
# key:
# mode: "0640"
# owner: root
# group: www-data
# type: RSA
# size: 4096
# cert:
# mode: "0644"
# owner: root
# group: www-data
# country_name: "AT"
# locality_name: "Graz"
# organization_name: "spreadspace"
# organizational_unit_name: "ansible"
# state_or_province_name: "Styria"
# basic_constraints:
# - "CA:TRUE"
# - "pathLenConstraint:0"
# basic_constraints_critical: no
# key_usage:
# - digitalSignature
# - keyAgreement
# key_usage_critical: yes
# extended_key_usage:
# - serverAuth
# extended_key_usage_critical: yes
# create_subject_key_identifier: yes
# digest: SHA256
# not_before: +0h
# not_after: +520w
|
