x509_certificate_convert
Manage cryptographic files natively on the target
Collection: community.crypto
Full Name: community.crypto.x509_certificate_convert
Synopsis
Manage cryptographic files natively on the target
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| mode | raw | Numeric or symbolic destination mode | ||
| owner | string | Destination owner name or numeric UID | ||
| group | string | Destination group name or numeric GID | ||
| seuser | string | SELinux user or _default | ||
| serole | string | SELinux role or _default | ||
| setype | string | SELinux type or _default | ||
| selevel | string | SELinux level or _default | ||
| attributes | string | Writable Linux file attributes | ||
| unsafe_writes | bool | false | Allow non-atomic writes when atomic replacement is unavailable | |
| backup | bool | false | Save existing content before replacement or deletion | |
| src_path | string | Input file | ||
| src_content | string | Input content | ||
| src_content_base64 | bool | false | Decode base64 input content | |
| format | string | yes | Destination encoding: pem or der | |
| strict | bool | false | Validate PEM labels, object count and line lengths | |
| dest_path | string | yes | Destination file | |
| verify_cert_parsable | bool | false | Validate the ASN.1 certificate structure |
Example
yaml
- name: Convert a certificate to DER
community.crypto.x509_certificate_convert:
src_path: /etc/ssl/certificate.pem
dest_path: /etc/ssl/certificate.der
format: der