opencore.keystores

Opencore.Keystores

This role helps you set up a Public Key Infrastructure (PKI) and create server and user certificates.

For more details, check out this blog post.

Requirements

This role is meant to be used on a single computer (localhost) and will create files based on the inventory information. The computer running this role needs to have:

  • OpenSSL
  • Java (for the keytool command)

Role Variables

You need to set one required variable for the role to work:

  • KEYSTORE_BASE_DIR: This is the main folder where files will be created. If you are using the wrapper script, it will automatically use the current directory.

You can configure the role with these additional settings:

Variable Description Default
CLIENT_CERTIFICATES List of usernames for which client certificates will be created. ["user1", "user2"]
CERTIFICATE_VALID_DAYS How many days the certificates will be valid. 365
KEY_VALID_DAYS How many days the keys will be valid. 10000
SSL_STORE_PASSWORD Password for the keystore files. secret
SSL_KEY_PASSWORD Password for the keys inside the keystores. secret
FORCE_CA If set to true, existing files will be deleted, and new CA, user, and server files will be created. false
FORCE_CERTS If set to true, CA files will remain, but all user and server keys and certificates will be regenerated. false
DOMAIN Used for certificate properties. OPENCORE.COM
O Used for certificate properties. OpenCore
C Used for certificate properties. DE
ST Used for certificate properties. SH
L Used for certificate properties. Wedel
OU Used for certificate properties. Internal
KEYSTORE_DIR Directory path for keystores. Usually, you shouldn't need to change this.
CA_DIR Directory path for CA files. Usually, you shouldn't need to change this.
CERT_DIR Directory path for intermediate certificates and CSR files. Usually, you shouldn't need to change this.

Dependencies

This role does not require other roles to work.

Example Playbook

Here's a simple example of how to use this role:

- hosts: localhost
  roles:
    - opencore.keystores

License

BSD

Informazioni sul progetto

Generates a set of java key- & truststores

Installa
ansible-galaxy install opencore.keystores
Licenza
Unknown
Download
135
Proprietario
Big Data, Hadoop, Kafka etc. - Training, Consulting, Insights