ansible-openssl-self-signed-certs

Creates self-signed certificates with OpenSSL

Requirements

Python
Docker (for testing only)

Tasks

Create working directory
Create certificate authority (CA)
Create certificates for sites

Role parameters

Variable	Type	Mandatory?	Default	Description
openssl_working_directory	text	no	/srv/openssl	Directory to which the CA and CSRs are saved
openssl_certificates_directory	text	no	/srv/openssl/certs	Directory to which the certificates and keys are saved
openssl_sites	array of texts	no	[]	The sites for which certificates will be created
openssl_ca_name	text	no	my_CA	Your certificate name
openssl_download_dir	text	no	./.tmp	Download directory where the created CA cert will be stored locally
openssl_ca_key_size	number	no	4096	Defines the CA key size
openssl_cert_key_size	number	no	4096	Defines the certificates key size

Example Playbook

Requirement

- name: create-self-signed-certs
  src: https://github.com/borisskert/ansible-openssl-self-signed-certs.git
  scm: git

Playbook

Usage (without parameters):

- hosts: test_machine
  roles:
    - role: create-self-signed-certs

Usage (with parameters):

- hosts: test_machine
  roles:
    - role: create-self-signed-certs
      openssl_ca_name: site.org
      openssl_ca_key_size: 8192
      openssl_cert_key_size: 2048
      openssl_sites:
        - my.first.site.org
        - my.second.site.org
        - my.third.site.org

Testing

Requirements:

Run within docker

shell script molecule test