# OpenSSL (Private Keys, CSR, Certificates) management - Request for feedbacks

**URL:** <https://forum.ansible.com/t/openssl-private-keys-csr-certificates-management-request-for-feedbacks/21605>\
**Category:** Ansible Developer\
**Created:** [May 30, 2016, 12:59pm UTC](https://forum.ansible.com/t/openssl-private-keys-csr-certificates-management-request-for-feedbacks/21605 "2016-05-30T12:59:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yanis\_Guenane](https://avatars.discourse-cdn.com/v4/letter/y/90db22/32.png) [@Yanis\_Guenane](https://forum.ansible.com/u/Yanis_Guenane)\
**Post date:** [May 30, 2016, 12:59pm UTC](https://forum.ansible.com/t/openssl-private-keys-csr-certificates-management-request-for-feedbacks/21605/1 "2016-05-30T12:59:43Z")

</div>

Hello the Ansible Community,

After looking into ansible-modules-core[1] and ansible-modules-extras[2],  
I’ve seen no current modules for managing OpenSSL private keys, certificate  
signing requests and certificates.

Hence I have been working on three new modules that I have submitted for review:

- openssl\_privatekey[3]
- openssl\_csr[4]
- openssl\_cert[5]

All three modules interact with openssl through pyOpenSSL python module.

openssl\_privatekey

---

<div class="post-metadata">

**Author:** ![Leo\_Guzynski](https://avatars.discourse-cdn.com/v4/letter/l/7993a0/32.png) [@Leo\_Guzynski](https://forum.ansible.com/u/Leo_Guzynski)\
**Post date:** [July 14, 2016, 2:33pm UTC](https://forum.ansible.com/t/openssl-private-keys-csr-certificates-management-request-for-feedbacks/21605/2 "2016-07-14T14:33:53Z")

</div>

Sounds like a good tool that I could start using.

My use case is for self signed certificate. State check could be something like  
key\_size = (need to generate new key when key is not this size)  
key fingerprint

Sometimes I find myself using things like easy-rsa to manage keys for things like openvpn. Doing this though ansible would also be desirable.

Thanks