Ansible Role: Self-signed Certificate

This is an Ansible Role that creates a self-signed TSL/SSL certificate.

Requirements

No special requirements.

Role Variables

• self_signed_certificate_FQDN: list of Fully Qualified Domain Names (CN)

Private Key Variables

• self_signed_certificate_key_path: folder where the private key will be stored
• self_signed_certificate_key_type: type of private key, can be RSA (default) or DSA
• self_signed_certificate_key_size: size of the private key in bits, default is 4096

Certificate Signing Request Variables

• self_signed_certificate_csr_path: folder where the certificate signing request will be stored
• self_signed_certificate_csr_digest: digest for the certificate signing request, default is sha512
• self_signed_certificate_email: email address for the signing request (E)
• self_signed_certificate_city: city name for the signing request (L)
• self_signed_certificate_state: state or province name for the signing request (ST)
• self_signed_certificate_country: country name for the signing request (C)
• self_signed_certificate_organisation: organization name for the signing request (O)
• self_signed_certificate_organizational_unit: organizational unit name for the signing request (OU)

Certificate Variables

• self_signed_certificate_path: folder where the certificate will be stored
• self_signed_certificate_digest: digest for the certificate, default is sha512
• self_signed_certificate_not_after: when the certificate will expire, default is +3650d (ten years)

Dependencies

None.

Example Playbook

- name: Generate self-signed certificate
  hosts: all
  roles:
    - hadrienpatte.self_signed_certificate

License

MIT License

Author Information

Hadrien Patte