certificate
certificate copied to clipboard
Role for managing TLS/SSL certificate issuance and renewal
This PR is for the purpose of triggering periodic CI testing. We don't currently have a way to trigger CI without a PR, so this PR serves that purpose.
The certificate role is not idempotent using Debian 12 on both the controller and managed node. For details, see discussion after https://github.com/linux-system-roles/certificate/issues/45#issuecomment-1894465030
https://github.com/linux-system-roles/certificate/pull/97 has added the functionality. Give a hint in the README how it will work.
Notes: Changing the profile will not delete and re-issue the certificate. I'm not sure how would I write a test with the self-signed provider. I have tested it with IPA...
Remove symlinks task, add task to include role using the full path to ipaserver role https://github.com/linux-system-roles/certificate/issues/28
IMHO it would be a nice and useful feature for this role to support [RFC8555](https://www.rfc-editor.org/rfc/rfc8555)-compliant CAs like Let's Encrypt. With this feature users who don't have a Free IPA CA...
Yes Open
I've been debugging the RHEL 7 failures in https://github.com/linux-system-roles/cockpit/pull/39 , and scratching my head over why RHEL 7's curl/OpenSSL don't accept lsr.certificate self-signed certificates. Turns out the reason is that...
IPA supports multiple Cert Profiles out of the box and more can be added for custom requirements. The getcert request -T option should support this. Request that the role be...