setup some variables for the ca

group_vars/all/ca.yml

@@ -34,3 +34,24 @@ ca_cert: |
   30+Lhx9/kHb7mGApkw/LQ1+Kitak06T/xMfgzKZ2W/1GcwR3gyDySKa+B0V0XgkI
   BDuPR7FwM2JG0BR37maKxgDtkR7R
   -----END CERTIFICATE-----
+crl_distribution_points:
+  - full_name: "URI:https://ca.deso-palaiseau.fr/revocations.crl"
+    reasons:
+      - key_compromise
+      - ca_compromise
+      - affiliation_changed
+      - superseded
+      - cessation_of_operation
+      - certificate_hold
+      - privilege_withdrawn
+      - aa_compromise
+  - full_name: "URI:https://ca-pains-perdus.intra/revocations.crl"
+    reasons:
+      - key_compromise
+      - ca_compromise
+      - affiliation_changed
+      - superseded
+      - cessation_of_operation
+      - certificate_hold
+      - privilege_withdrawn
+      - aa_compromise