andrewrothstein.pki

This is a tool for managing a Public Key Infrastructure (PKI). It uses cfssl to create a Certificate Authority (CA) key and certificate, and a collection of key/certificate pairs for multiple servers. It also supports subject alternate names. This tool has saved me from needing to learn the openssl command line!

Requirements

Check the meta/main.yml file for requirements.

Role Variables

See the defaults/main.yml file for role variables.

Dependencies

See the meta/main.yml file for dependencies.

Example Playbook

It's best to target localhost if you're managing a local PKI.

- hosts: localhost
  connection: local
  roles:
    - role: andrewrothstein.pki
      pki_dir: ~/pki
      pki_self_sign: True
      pki_ca:
        cname: ca.foo.io
      pki_servers:
        - cname: host1.foo.io
        - cname: host2.foo.io
        - cname: host3.foo.io