certificate icon indicating copy to clipboard operation
certificate copied to clipboard

Role for managing TLS/SSL certificate issuance and renewal

Results 21 certificate issues
Sort by recently updated
recently updated
newest added

This PR is for the purpose of triggering periodic CI testing. We don't currently have a way to trigger CI without a PR, so this PR serves that purpose.

The certificate role is not idempotent using Debian 12 on both the controller and managed node. For details, see discussion after https://github.com/linux-system-roles/certificate/issues/45#issuecomment-1894465030

https://github.com/linux-system-roles/certificate/pull/97 has added the functionality. Give a hint in the README how it will work.

Notes: Changing the profile will not delete and re-issue the certificate. I'm not sure how would I write a test with the self-signed provider. I have tested it with IPA...

Remove symlinks task, add task to include role using the full path to ipaserver role https://github.com/linux-system-roles/certificate/issues/28

IMHO it would be a nice and useful feature for this role to support [RFC8555](https://www.rfc-editor.org/rfc/rfc8555)-compliant CAs like Let's Encrypt. With this feature users who don't have a Free IPA CA...

I've been debugging the RHEL 7 failures in https://github.com/linux-system-roles/cockpit/pull/39 , and scratching my head over why RHEL 7's curl/OpenSSL don't accept lsr.certificate self-signed certificates. Turns out the reason is that...

IPA supports multiple Cert Profiles out of the box and more can be added for custom requirements. The getcert request -T option should support this. Request that the role be...