Ansible Role to Create a Self-Signed Certificate

How to Use

You need to set the ssl_cert_cn to the full name (FQDN) of the host for which you are creating the certificate. If the certificate and key are already there, they will not be replaced.

You can also set ssl_dh_path if you want. This will allow the creation of Diffie-Hellman parameters at the location you specify and set up a cron job to keep it updated.

This playbook has only been tested on Ubuntu Server 16.04.