|
|
|
@@ -13,14 +13,14 @@ |
|
|
|
certificate_directory: "{{ certificate_authority_directory }}" |
|
|
|
certificate_file: "{{ certificate_authority_directory }}/certs/ca.cert.pem" |
|
|
|
certificate_signing_request_file: "{{ certificate_authority_directory }}/csr/ca.csr.pem" |
|
|
|
certificate_signing_request_config_file: "{{ certificate_authority_directory }}/csr/ca.csr.cnf" |
|
|
|
certificate_signing_request_config_file: "{{ certificate_authority_directory }}/cnf/ca.csr.cnf" |
|
|
|
certificate_private_key_file: "{{ certificate_authority_directory }}/private/ca.key.pem" |
|
|
|
certificate_private_key_password: "{{ certificate_authority_private_key_password }}" |
|
|
|
|
|
|
|
- name: self sign certificate |
|
|
|
command: openssl ca -selfsign -batch -notext |
|
|
|
-config cnf/ca.cnf |
|
|
|
-in csr/ca.csr.pem |
|
|
|
-in cnf/ca.csr.pem |
|
|
|
-out certs/ca.cert.pem |
|
|
|
{{ certificate_authority_private_key_password is defined | ternary('-passin env:PRIVATE_KEY_PASSWORD','') }} |
|
|
|
args: |
|
|
|
|
