volker.raschek/ansible-role-certificate-authority
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: drop passphrase from CSR task for unencrypted client key

Browse Source 
This task file is only included when
`certificate_authority_client_tls_key_passphrase` is empty, so the private key
is created without encryption. Passing the empty passphrase to `openssl_csr`
made the module attempt to decrypt an unencrypted key instead of treating it as
absent. The sibling CSR task for certificates with SANs already omitted the
attribute, so this also aligns both code paths.

Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
volker.raschek
2026-09-07 22:28:52 +02:00
co-authored by Copilot
parent 309c5e0e65
commit 38ab2f55bb
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tasks/client_certificate_unprotected.yaml
-1
View File
@@ -16,7 +16,6 @@
organization_name: "{{ certificate_authority_client_organization_name }}" organization_name: "{{ certificate_authority_client_organization_name }}"
organizational_unit_name: "{{ certificate_authority_client_organizational_unit_name }}" organizational_unit_name: "{{ certificate_authority_client_organizational_unit_name }}"
path: "{{ certificate_authority_client_path }}/cert-req.pem" path: "{{ certificate_authority_client_path }}/cert-req.pem"
privatekey_passphrase: "{{ certificate_authority_client_tls_key_passphrase }}"
privatekey_path: "{{ certificate_authority_client_path }}/privkey.pem" privatekey_path: "{{ certificate_authority_client_path }}/privkey.pem"
state_or_province_name: "{{ certificate_authority_client_state_or_province_name }}" state_or_province_name: "{{ certificate_authority_client_state_or_province_name }}"
when: | when: |