Pains-Perdus/ansible_hacky_pki
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

move key_usage var to defaults

Browse source
This commit is contained in:
histausse 2021-09-09 20:27:24 +02:00
parent 7368a241f2
commit 73594369e3
Signed by: histausse
GPG key ID: 67486F107F62E9E9
2 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
roles/generate-cert/defaults/main.yml
View file

@ -1 +1,4 @@
--- ---
key_usage:
- digitalSignature
- keyEncipherment

5
roles/generate-cert/tasks/main.yml
View file

@ -33,10 +33,7 @@
basic_constraints: basic_constraints:
- CA:FALSE # syntax? - CA:FALSE # syntax?
basic_contraints_critical: yes basic_contraints_critical: yes
key_usage: # need more works on this key_usage: "{{ key_usage }}"
- digitalSignature
- keyEncipherment
- clientAuth
key_usage_critical: yes key_usage_critical: yes
subject_alt_name: "{{ subject_alt_name | default(omit) }}" subject_alt_name: "{{ subject_alt_name | default(omit) }}"
# TODO: add a revocation methode, most probably crl, with crl_distribution_points # TODO: add a revocation methode, most probably crl, with crl_distribution_points