A role for managing a PKI. Leverags cfssl to build a CA key/cert, and collection of key/cert pairs for a fleet of hosts. Supports subject alternate names. Saved me from having to learn the openssl command line!

See meta/main.yml

See defaults/main.yml

See meta/main.yml

Recommended to target localhost if you're managing a local eyes-above-the-wall PKI.

- hosts: localhost
  connection: local
  roles:
    - role: andrewrothstein.pki
	  pki_dir: ~/pki
      pki_self_sign: Ture
	  pki_ca:
	    cname: ca.foo.io
	  pki_servers:
	    - cname: host1.foo.io
		- cname: host2.foo.io
		- cname: host3.foo.io

MIT

Andrew Rothstein [email protected]