Skip to content

Webcertificate

Go to Automation

View in GitLab

Description

This automation manages web certificates on Linux hosts. It checks for the existence of certificates and keys, validates their expiration dates, and creates new certificates if necessary. The renewal of certificates is done with the d09.certificates role which runs on the SRVAAPWIN server.

Credentials

  • sys_ansible_local
  • sys_srvaapwin_pki

Input

Variable Description
target The target hosts for the playbook
san Subject Alternative Name for the certificate
cert_type Type of certificate (standard or fullchain)
overwrite Overwrite existing certificate files (default true)
key_location Location to store the private key
cert_location Location to store the certificate
min_days_valid Minimum number of days the certificate should be valid
force_create Create certificate even if the existing certificate is still valid

Output

None

Dependencies