| Zack Williams | c047c87 | 2017-01-11 08:38:15 -0700 | [diff] [blame] | 1 | --- |
| 2 | # pki-cert/defaults/main.yml |
| 3 | |
| Zack Williams | 44845c6 | 2017-04-21 13:57:14 -0700 | [diff] [blame] | 4 | pki_dir: "{{ playbook_dir }}/pki" |
| 5 | |
| 6 | # client/server cert parameters |
| Zack Williams | c047c87 | 2017-01-11 08:38:15 -0700 | [diff] [blame] | 7 | cert_size: 2048 |
| 8 | cert_digest: "sha256" |
| Zack Williams | 44845c6 | 2017-04-21 13:57:14 -0700 | [diff] [blame] | 9 | cert_days: 365 |
| Zack Williams | c047c87 | 2017-01-11 08:38:15 -0700 | [diff] [blame] | 10 | |
| Zack Williams | 9cea13e | 2017-07-25 16:32:59 -0700 | [diff] [blame^] | 11 | # site names |
| 12 | site_name: placeholder-sitename |
| 13 | site_humanname: "Placeholder Site HumanName" |
| 14 | site_suffix: "{{ site_name }}.test" |
| 15 | |
| 16 | # Default subject prefix |
| 17 | ssl_cert_subj_prefix: "/C=US/ST=California/L=Menlo Park/O=ON.Lab/OU={{ site_humanname }} Deployment" |
| 18 | |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 19 | # lists of certificates to create |
| Zack Williams | 9cea13e | 2017-07-25 16:32:59 -0700 | [diff] [blame^] | 20 | server_certs: |
| 21 | - cn: "keystone.{{ site_suffix }}" |
| 22 | subj: "{{ ssl_cert_subj_prefix }}/CN=keystone.{{ site_suffix }}" |
| 23 | altnames: |
| 24 | - "DNS:keystone.{{ site_suffix }}" |
| 25 | - "DNS:keystone" |
| 26 | - cn: "xos-core.{{ site_suffix }}" |
| 27 | subj: "{{ ssl_cert_subj_prefix }}/CN=xos-core.{{ site_suffix }}" |
| 28 | altnames: |
| 29 | - "DNS:xos-core.{{ site_suffix }}" |
| 30 | - "DNS:xos-core" |
| 31 | |
| Zack Williams | ba5549c | 2017-03-25 15:04:45 -0700 | [diff] [blame] | 32 | client_certs: [] |
| Zack Williams | c047c87 | 2017-01-11 08:38:15 -0700 | [diff] [blame] | 33 | |