move key_usage var to defaults

3 years ago · 73594369e3
parent 7368a241f2
commit 73594369e3
2 changed files with 4 additions and 4 deletions
--- a/roles/generate-cert/defaults/main.yml
+++ b/roles/generate-cert/defaults/main.yml
@ -1 +1,4 @@
 ---
+key_usage:
+  - digitalSignature
+  - keyEncipherment
--- a/roles/generate-cert/tasks/main.yml
+++ b/roles/generate-cert/tasks/main.yml
@ -33,10 +33,7 @@
    basic_constraints:
      - CA:FALSE # syntax?
    basic_contraints_critical: yes
-    key_usage: # need more works on this
-      - digitalSignature
-      - keyEncipherment
-      - clientAuth
+    key_usage: "{{ key_usage }}"
    key_usage_critical: yes
    subject_alt_name: "{{ subject_alt_name | default(omit) }}"
    # TODO: add a revocation methode, most probably crl, with crl_distribution_points