ansible ssl

This tool installs an SSL Certificate and Key on your server.
The chain file will only be copied if you specify it.

Defaults:

• ssl_cert_path: '/etc/ssl/certs' (location for the SSL certificate)
• ssl_key_path: '/etc/ssl/private' (location for the SSL key)
• ssl_crt_name: 'server.crt' (name of the certificate file)
• ssl_key_name: 'server.key' (name of the key file)
• ssl_ica_name: 'server.ca' (name of the intermediate certificate file)
• ssl_user: 'root' (user for the SSL files)
• ssl_group: 'root' (group for the SSL files)
• ssl_cert_umask: '0644' (permissions for the certificate file)
• ssl_key_umask: '0640' (permissions for the key file)

You can change these defaults in your Playbook.

Example Playbook:

- hosts: all
  roles:
    - role: ypsman.ssl
      ssl_cert: vars/certfile.crt
      ssl_key:  vars/certfile.key
      ssl_ica:  vars/chainfile.pem    # optional
      ssl_cert_path: '/etc/pki/certs' # optional