openssl_dhparam

Manage cryptographic files natively on the target

Collection: community.crypto

Full Name: community.crypto.openssl_dhparam

Synopsis

Manage cryptographic files natively on the target

Name	Type	Required	Default	Description
mode	raw			Numeric or symbolic destination mode
owner	string			Destination owner name or numeric UID
group	string			Destination group name or numeric GID
seuser	string			SELinux user or _default
serole	string			SELinux role or _default
setype	string			SELinux type or _default
selevel	string			SELinux level or _default
attributes	string			Writable Linux file attributes
unsafe_writes	bool		`false`	Allow non-atomic writes when atomic replacement is unavailable
backup	bool		`false`	Save existing content before replacement or deletion
path	string	yes		DH parameter destination
state	string		`present`	Whether parameters should exist
size	int		`4096`	DH prime size in bits
force	bool		`false`	Generate fresh random parameters on every execution
select_crypto_backend	string		`auto`	Compatibility validation selector; execution is native
return_content	bool		`false`	Return current DH parameter content

yaml

- name: Generate fresh Diffie-Hellman parameters
  community.crypto.openssl_dhparam:
    path: /etc/ssl/dhparams.pem
    size: 2048