openssl_csr_pipe

Generate or update a certificate signing request in memory

Collection: community.crypto

Full Name: community.crypto.openssl_csr_pipe

Synopsis

Generate or update a certificate signing request in memory

Parameters

Name	Type	Default	Description
digest	string	`sha256`	Pinned executable CSR argument (str source line 804)
privatekey_path	string		Pinned executable CSR argument (path source line 805)
privatekey_content	string		Pinned executable CSR argument (str source line 806)
privatekey_passphrase	string		Pinned executable CSR argument (str source line 807)
version	int	`1`	Pinned executable CSR argument (int source line 808)
subject	dict		Pinned executable CSR argument (dict source line 809)
subject_ordered	list		Pinned executable CSR argument (list source line 810)
country_name	string		Pinned executable CSR argument (str source line 811)
state_or_province_name	string		Pinned executable CSR argument (str source line 812)
locality_name	string		Pinned executable CSR argument (str source line 816)
organization_name	string		Pinned executable CSR argument (str source line 817)
organizational_unit_name	string		Pinned executable CSR argument (str source line 818)
common_name	string		Pinned executable CSR argument (str source line 822)
email_address	string		Pinned executable CSR argument (str source line 823)
subject_alt_name	list		Pinned executable CSR argument (list source line 824)
subject_alt_name_critical	bool	`false`	Pinned executable CSR argument (bool source line 829)
use_common_name_for_san	bool	`true`	Pinned executable CSR argument (bool source line 834)
key_usage	list		Pinned executable CSR argument (list source line 839)
key_usage_critical	bool	`false`	Pinned executable CSR argument (bool source line 840)
extended_key_usage	list		Pinned executable CSR argument (list source line 845)
extended_key_usage_critical	bool	`false`	Pinned executable CSR argument (bool source line 850)
basic_constraints	list		Pinned executable CSR argument (list source line 855)
basic_constraints_critical	bool	`false`	Pinned executable CSR argument (bool source line 860)
ocsp_must_staple	bool	`false`	Pinned executable CSR argument (bool source line 865)
ocsp_must_staple_critical	bool	`false`	Pinned executable CSR argument (bool source line 870)
name_constraints_permitted	list		Pinned executable CSR argument (list source line 875)
name_constraints_excluded	list		Pinned executable CSR argument (list source line 876)
name_constraints_critical	bool	`false`	Pinned executable CSR argument (bool source line 877)
create_subject_key_identifier	bool	`false`	Pinned executable CSR argument (bool source line 878)
subject_key_identifier	string		Pinned executable CSR argument (str source line 879)
authority_key_identifier	string		Pinned executable CSR argument (str source line 880)
authority_cert_issuer	list		Pinned executable CSR argument (list source line 881)
authority_cert_serial_number	int		Pinned executable CSR argument (int source line 882)
crl_distribution_points	list		Pinned executable CSR argument (list source line 883)
select_crypto_backend	string	`auto`	Pinned executable CSR argument (str source line 908)
content	string		Pinned executable CSR argument (str source line 181)

Example

yaml

# Requirements: a Linux controller and one localhost inventory host.
# Run with --forks 1; use local connection and disable fact gathering.
# /etc/ssl/private/example.pem must already exist and be readable.
# Use the supported native Go runtime with Go FIPS mode disabled.
# The shipped CPython64/seed0 JSON compatibility model needs no Python
# installation or PYTHONHASHSEED setting; general Python/provider parity is not claimed.
# Use 1-16 supported tasks with no_log: true and the same valid literal register.
# Loops, delegation, roles, handlers and task/play environments are unsupported.
# Codec/resource/native-provider limits fail closed; SSH and multiple hosts
# are outside this profile. The private register is opaque to ordinary debug.
- name: Generate a private local certificate signing request
  hosts: localhost
  connection: local
  gather_facts: false
  tasks:
    - name: Generate an in-memory certificate signing request
      community.crypto.openssl_csr_pipe:
        privatekey_path: /etc/ssl/private/example.pem
        common_name: example.test
      no_log: true
      register: csr