Add more properties.

This commit is contained in:
Felix Fontein 2025-04-11 14:02:18 +02:00
parent 6d88064c92
commit 1da23b8173

View File

@ -75,8 +75,15 @@
commonName: Ansible test CA for Docker HTTPS connection tests
useCommonNameForSAN: false
basic_constraints:
- 'CA:TRUE'
- 'CA:TRUE'
basic_constraints_critical: true
key_usage:
- digitalSignature
- Certificate Sign
key_usage_critical: true
extended_key_usage:
- serverAuth # the same as "TLS Web Server Authentication"
extended_key_usage_critical: true
- name: Create CA certificate
community.crypto.x509_certificate:
@ -90,7 +97,7 @@
path: '{{ remote_tmp_dir }}/cert.csr'
privatekey_path: '{{ remote_tmp_dir }}/cert.key'
subject_alt_name:
- DNS:daemon-tls.ansible.com
- DNS:daemon-tls.ansible.com
subject_alt_name_critical: true
- name: Create frontend certificate