cfssl-server-role/templates/cfssl.json.j2
2022-12-21 20:51:34 +01:00

71 lines
No EOL
1.5 KiB
Django/Jinja

{
"auth_keys": {
"key_srv": {
"type": "standard",
"key": "{{cfssl_auth_key}}"
}
},
"signing": {
"default": {
"auth_key": "key_srv",
"crl_url": "http://{{inventory_hostname_short}}.{{vm_domain_name}}:8888/crl",
"expiry": "26280h",
"usages": [
"signing",
"key encipherment",
"client auth"
]
},
"profiles": {
"intermediate_ca": {
"auth_key": "key_srv",
"usages": [
"signing",
"digital signature",
"key encipherment",
"cert sign",
"crl sign",
"server auth",
"client auth"
],
"expiry": "87600h",
"ca_constraint": {
"is_ca": true,
"max_path_len": 0,
"max_path_len_zero": true
}
},
"server_client": {
"auth_key": "key_srv",
"usages": [
"signing",
"digital signing",
"key encipherment",
"server auth",
"client auth"
],
"expiry": "8760h"
},
"server": {
"auth_key": "key_srv",
"usages": [
"signing",
"digital signature",
"key encipherment",
"server auth"
],
"expiry": "8760h"
},
"client": {
"auth_key": "key_srv",
"usages": [
"signing",
"digital signature",
"key encipherment",
"client auth"
],
"expiry": "8760h"
}
}
}
}