Openssl_certificate -- register my certs in my CA database

erichymowitz
Tue, 12 Sep 2023 12:58:00 +0000
Get Help

Greetings.

I have a local CA for my network of machines. I am successfully using ansible modules openssl_privatekey / openssl_csr / openssl_certificate to create and distribute SSL certificates. However …

When I use the openssl ca command to create a cert, it will

check my CA database (index.txt) for a matching subject

generate a sequential serial number

register my new cert in the database

Sadly, the ansible modules don’t do this. It simply generates a certificate with (what I think is) a random serial number and does nothing with my index.txt file.

Is there a way that I can configure the ansible modules to manage my CA database? Or will I need to use a shell module to run the openssl ca command the way i want it to run?

Thanks.

5 posts - 4 participants