diff --git a/tasks/certificate.yml b/tasks/certificate.yml index 99153f4..fd5925d 100644 --- a/tasks/certificate.yml +++ b/tasks/certificate.yml @@ -13,14 +13,14 @@ certificate_directory: "{{ certificate_authority_directory }}" certificate_file: "{{ certificate_authority_directory }}/certs/ca.cert.pem" certificate_signing_request_file: "{{ certificate_authority_directory }}/csr/ca.csr.pem" - certificate_signing_request_config_file: "{{ certificate_authority_directory }}/csr/ca.csr.cnf" + certificate_signing_request_config_file: "{{ certificate_authority_directory }}/cnf/ca.csr.cnf" certificate_private_key_file: "{{ certificate_authority_directory }}/private/ca.key.pem" certificate_private_key_password: "{{ certificate_authority_private_key_password }}" - name: self sign certificate command: openssl ca -selfsign -batch -notext -config cnf/ca.cnf - -in csr/ca.csr.pem + -in cnf/ca.csr.pem -out certs/ca.cert.pem {{ certificate_authority_private_key_password is defined | ternary('-passin env:PRIVATE_KEY_PASSWORD','') }} args: