algo
                                
                                
                                
                                    algo copied to clipboard
                            
                            
                            
                        Deprecate OpenSSL CLI dependency
Starting with Ansible 2.3 there is basic support for SSL key generation which adds the dependency of pyOpenSSL to Ansible. Since this will already be an existing dependency; I propose we extend the ansible openssl module to support the features we need for X509 certificate signing and deprecate the requirement of openssl CLI and use of shell where possible.
Supports DSA/RSA only
Required Ansible 2.5
Blocker https://github.com/ansible/ansible/issues/53789