mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
d2f95910e3
Move the inline copy/content block into templates/openssl-root-ca.cnf.j2 and switch the task to ansible.builtin.template; the rendered config is identical. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
19 lines
473 B
Django/Jinja
19 lines
473 B
Django/Jinja
[ req ]
|
|
default_bits = {{ CA_ROOT.key_bits }}
|
|
default_md = sha256
|
|
prompt = no
|
|
distinguished_name = dn
|
|
x509_extensions = v3_ca
|
|
|
|
[ dn ]
|
|
C = {{ CA_ROOT.subject.C }}
|
|
O = {{ CA_ROOT.subject.O }}
|
|
OU = {{ CA_ROOT.subject.OU }}
|
|
CN = {{ CA_ROOT.subject.CN }}
|
|
|
|
[ v3_ca ]
|
|
basicConstraints = critical,CA:TRUE,pathlen:1
|
|
keyUsage = critical,keyCertSign,cRLSign
|
|
subjectKeyIdentifier = hash
|
|
authorityKeyIdentifier = keyid:always,issuer
|