cfssl-server-role/templates/cfssl.json.j2

{
  "auth_keys": {
    "key_srv": {
      "type": "standard",
      "key": "{{cfssl_auth_key}}"
    }
  },
  "signing": {
    "default": {
      "auth_key": "key_srv",
      "crl_url": "http://{{inventory_hostname_short}}.{{vm_domain_name}}:8888/crl",
      "expiry": "26280h",
      "usages": [
        "signing",
        "key encipherment",
        "client auth"
      ]
    },
    "profiles": {
      "intermediate_ca": {
        "auth_key": "key_srv",
        "usages": [
            "signing",
            "digital signature",
            "key encipherment",
            "cert sign",
            "crl sign",
            "server auth",
            "client auth"
        ],
        "expiry": "87600h",
        "ca_constraint": {
            "is_ca": true,
            "max_path_len": 0, 
            "max_path_len_zero": true
        }
      },
      "server_client": {
        "auth_key": "key_srv",
        "usages": [
          "signing",
          "digital signing",
          "key encipherment",
          "server auth",
          "client auth"
        ],
        "expiry": "8760h"
      },
      "server": {
        "auth_key": "key_srv",
        "usages": [
          "signing",
          "digital signature",
          "key encipherment", 
          "server auth"
        ],
        "expiry": "8760h"
      },
      "client": {
        "auth_key": "key_srv",
        "usages": [
          "signing",
          "digital signature",
          "key encipherment", 
          "client auth"
        ],
        "expiry": "8760h"
      }
    }
  }
}