This commit is contained in:
nono 2022-12-21 20:51:52 +01:00
parent 615a9f85f0
commit c331418ba0
2 changed files with 11 additions and 11 deletions

View file

@ -1,25 +1,25 @@
---
cfssl_version: 1.6.3
cfssl_bin_directory: /usr/bin
cfssl_serve_url: localhost:8888
cfssl_profile: server_client
cfssl_bin_directory: '/usr/bin'
cfssl_serve_url: 'localhost:8888'
cfssl_profile: 'server_client'
cfssl_auth_key: "0123456789ABCDEF0123456789ABCDEF"
crt_key:
algo: rsa
algo: 'rsa'
size: 4096
crt_names:
- C: FR
- C: 'FR'
L: 'Paris'
O: 'Acme'
OU: 'IT'
ssl_dir: /etc/ssl
cfssl_config_file: {{ssl_dir}}/cfssl.json
cfssl_csr_file : {{ssl_dir}}/csr.json
key_file: {{ssl_dir}}/private/{{inventory_hostname_short}}.key
cert_file: {{ssl_dir}}certs/{{inventory_hostname_short}}.pem
ssl_dir: '/etc/ssl'
cfssl_config_file: '{{ssl_dir}}/cfssl.json'
cfssl_csr_file : '{{ssl_dir}}/csr.json'
key_file: '{{ssl_dir}}/private/{{inventory_hostname_short}}.key'
cert_file: '{{ssl_dir}}/certs/{{inventory_hostname_short}}.pem'
integrate_ca: yes
ca_filename : my_intermediate_ca.crt

View file

@ -26,7 +26,7 @@
shell: 'mv {{ssl_dir}}/{{inventory_hostname_short}}-key.pem {{key_file}}'
- name: move cert file to {{cert_file}}
hell: 'mv {{ssl_dir}}/{{inventory_hostname_short}}.pem {{cert_file}}'
shell: 'mv {{ssl_dir}}/{{inventory_hostname_short}}.pem {{cert_file}}'
- name: recuperate ca certificate
shell: '{{cfssl_bin_directory}}/cfssl info -remote "{{cfssl_serve_url}}" | cfssljson -bare -stdout > /usr/local/share/ca-certificates/{{ca_filename}}'