commit 36b1956a0ee4732965d180628cf412e1ebed11bf
author Zack Williams <zdw@cs.arizona.edu> Mon Sep 18 16:51:28 2017 -0700
committer Zack Williams <zdw@cs.arizona.edu> Mon Sep 18 21:55:21 2017 -0700
tree 62f26a3e7e1f3179123ba78afc262d7fbe573846
parent afd04a88572c13aa8b20ccc81b3c0099fa43b937

[CORD-1909]
Set cert_size when generating server/client leaf certs

Change-Id: I5aeb02411b2fbf5792237b77ffdc62fd6d1b76e3
(cherry picked from commit 79ddf4b5f2a4273edce5f1adb7decfec9d919e72)

roles/pki-cert/tasks/main.yml

diff --git a/roles/pki-cert/tasks/main.yml b/roles/pki-cert/tasks/main.yml
index eff9183..80a9d65 100644
--- a/roles/pki-cert/tasks/main.yml
+++ b/roles/pki-cert/tasks/main.yml
@@ -21,6 +21,7 @@
   command: >
     openssl genrsa
       -out {{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem
+      {{ cert_size }}
   args:
     creates: "{{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem"
   with_items: "{{ server_certs }}"
@@ -91,6 +92,7 @@
   command: >
     openssl genrsa
       -out {{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem
+      {{ cert_size }}
   args:
     creates: "{{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem"
   with_items: "{{ client_certs }}"