2022-12-16 16:51:39 +00:00
|
|
|
{
|
2022-12-21 00:31:34 +00:00
|
|
|
"auth_keys": {
|
|
|
|
"key_srv": {
|
|
|
|
"type": "standard",
|
|
|
|
"key":"{{cfssl_auth_key}}"
|
|
|
|
}
|
|
|
|
},
|
2022-12-16 16:51:39 +00:00
|
|
|
"signing": {
|
|
|
|
"default": {
|
2022-12-21 00:31:34 +00:00
|
|
|
"auth_key": "key_srv",
|
2022-12-16 16:51:39 +00:00
|
|
|
"crl_url": "http://{{inventory_hostname_short}}.{{vm_domain_name}}:8888/crl",
|
|
|
|
"expiry": "26280h",
|
|
|
|
"usages": [
|
|
|
|
"signing",
|
|
|
|
"key encipherment",
|
|
|
|
"client auth"
|
|
|
|
]
|
|
|
|
},
|
|
|
|
"profiles": {
|
|
|
|
"intermediate_ca": {
|
2022-12-21 00:31:34 +00:00
|
|
|
"auth_key": "key_srv",
|
2022-12-16 16:51:39 +00:00
|
|
|
"usages": [
|
|
|
|
"signing",
|
|
|
|
"digital signature",
|
|
|
|
"key encipherment",
|
|
|
|
"cert sign",
|
|
|
|
"crl sign",
|
|
|
|
"server auth",
|
|
|
|
"client auth"
|
|
|
|
],
|
|
|
|
"expiry": "87600h",
|
|
|
|
"ca_constraint": {
|
|
|
|
"is_ca": true,
|
|
|
|
"max_path_len": 0,
|
|
|
|
"max_path_len_zero": true
|
|
|
|
}
|
|
|
|
},
|
2022-12-21 00:31:34 +00:00
|
|
|
"server_client": {
|
|
|
|
"auth_key": "key_srv",
|
2022-12-16 16:51:39 +00:00
|
|
|
"usages": [
|
|
|
|
"signing",
|
|
|
|
"digital signing",
|
|
|
|
"key encipherment",
|
2022-12-21 00:31:34 +00:00
|
|
|
"server auth",
|
|
|
|
"client auth"
|
|
|
|
],
|
|
|
|
"expiry": "8760h"
|
|
|
|
},
|
|
|
|
"server": {
|
|
|
|
"auth_key": "key_srv",
|
|
|
|
"usages": [
|
|
|
|
"signing",
|
|
|
|
"digital signature",
|
|
|
|
"key encipherment",
|
2022-12-16 16:51:39 +00:00
|
|
|
"server auth"
|
|
|
|
],
|
|
|
|
"expiry": "8760h"
|
|
|
|
},
|
|
|
|
"client": {
|
2022-12-21 00:31:34 +00:00
|
|
|
"auth_key": "key_srv",
|
2022-12-16 16:51:39 +00:00
|
|
|
"usages": [
|
|
|
|
"signing",
|
|
|
|
"digital signature",
|
|
|
|
"key encipherment",
|
|
|
|
"client auth"
|
|
|
|
],
|
|
|
|
"expiry": "8760h"
|
|
|
|
}
|
|
|
|
}
|
2022-12-21 00:31:34 +00:00
|
|
|
}
|
2022-12-16 16:51:39 +00:00
|
|
|
}
|
|
|
|
}
|