commit 79ddf4b5f2a4273edce5f1adb7decfec9d919e72
author Zack Williams <zdw@cs.arizona.edu> Mon Sep 18 16:51:28 2017 -0700
committer Zack Williams <zdw@cs.arizona.edu> Mon Sep 18 16:51:28 2017 -0700
tree 23b432460e064dccf72e7ce9c59d91716093bd62
parent a88041cd4608c376af2d4f3dff98f26338db1d1b

[CORD-1909]
Set cert_size when generating server/client leaf certs

Change-Id: I5aeb02411b2fbf5792237b77ffdc62fd6d1b76e3

roles/pki-cert/tasks/main.yml

diff --git a/roles/pki-cert/tasks/main.yml b/roles/pki-cert/tasks/main.yml
index eff9183..80a9d65 100644
--- a/roles/pki-cert/tasks/main.yml
+++ b/roles/pki-cert/tasks/main.yml
@@ -21,6 +21,7 @@
   command: >
     openssl genrsa
       -out {{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem
+      {{ cert_size }}
   args:
     creates: "{{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem"
   with_items: "{{ server_certs }}"
@@ -91,6 +92,7 @@
   command: >
     openssl genrsa
       -out {{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem
+      {{ cert_size }}
   args:
     creates: "{{ pki_dir }}/{{ site_name }}_im_ca/private/{{ item.cn }}_key.pem"
   with_items: "{{ client_certs }}"