Generate a Self-Signed Certificate with Your Own CA

Open Source Love
Author
CI
Downloads on Ansible Galaxy
Version

Note: Learn how to get Chrome to accept self-signed localhost certificates.

Description

⚠️ Please note: All my Ansible roles are designed for my specific IT setup. Make sure to review them carefully to ensure they work well on your servers.

Requirements

• Ansible version 2.9 or higher

Dependencies

• PyOpenSSL version 0.15 or higher, or cryptography version 1.3 or higher

Installation

• Install git

Use [email protected]:bguerel/self-signed_certificate.git to get the latest version of the role from git.

Supported Platforms

RedHat:
  versions:
    - all
Debian:
  versions:
    - all
Suse:
  versions:
    - all

Role Variables

You can find the variable descriptions and default settings in the defaults directory in this file:

• defaults/main.yml for default settings

Example

Configuration

# Specify a domain name for each node
self_signed_domain:
  example-app-01v:
  - app01.example.local
  example-app-02v:
  - app02.example.local

# Certificate directory
self_signed_cert_path: "/etc/ssl/localcerts"

# Name of the certificate issuer
self_signed_organization_name: "BGUEREL Self-signed CA"

# Certificate validity period in days
self_signed_expiration_date_in_days: 3650

# Generate diffie-hellman parameters with the default size (4096 bits)
self_signed_create_dhparam: yes

Playbook Usage

To use it in a playbook, do the following:

- hosts: whatever
  become: yes
  roles:
    - self-signed_certificate

License