Documentation

openssl_certificate

Generate and manage SSL/TLS certificates.

Attributes

check_mode:
  support: full

Parameters

Parameter	Required	Type	Values	Description
common_name	true	string		Common Name (CN) for the certificate.
force		boolean		Whether to force regeneration even if certificate exists. [default: `false`]
group		string		Group of the certificate file (name, not GID).
mode		string		Permissions of the certificate file.
owner		string		Owner of the certificate file (name, not UID).
path	true	string		Absolute path to the certificate file.
privatekey_path	true	string		Path to the private key file.
provider		string	selfsigned	Name of the provider to use. [default: `"selfsigned"`]
valid_in		integer		Number of days the certificate is valid. [default: `365`]

Examples

- name: Generate self-signed certificate
  openssl_certificate:
    path: /etc/ssl/certs/server.crt
    privatekey_path: /etc/ssl/private/server.key
    common_name: example.com
    provider: selfsigned
    valid_in: 365

- name: Generate self-signed certificate with custom settings
  openssl_certificate:
    path: /etc/ssl/certs/server.crt
    privatekey_path: /etc/ssl/private/server.key
    common_name: example.com
    provider: selfsigned
    valid_in: 365
    mode: "0644"