3 Commits

Include renames

Author	SHA1	Message	Date
volker.raschekandCopilot	2733f3929a	docs: shorten SAN format hint to keep README table aligned ... The previous wording exceeded the description column width generated by readme-generator, so markdownlint reported MD060/table-column-style for all three parameter tables. Shorten the hint to an `Example:` clause that fits the existing column width and pad the cells accordingly, keeping the README stable across regeneration. Co-authored-by: Copilot <copilot@github.com>	2026-09-07 22:28:52 +02:00
volker.raschekandCopilot	41d06e4e6d	feat!: apply subject alternative names to root and intermediate CA ... The variables `certificate_authority_root_ca_subject_alternative_names` and `certificate_authority_intermediate_ca_subject_alternative_names` were documented but never referenced by any task, so both CA certificates were always issued without SANs. Wire them into the corresponding CSR tasks and fall back to `omit` when the list is empty. SAN entries are now passed to `openssl_csr` unchanged instead of being prefixed with `DNS:` by the role. This allows other types such as `IP:` or `email:`, which the previous rewrite would have corrupted into values like `DNS:IP:...`. The client tasks additionally dropped `join(',') | quote`, because `quote` performs shell escaping and `openssl_csr` expects a list. Since both client CSR tasks only differed in `subject_alt_name`, they collapse into a single task per file. BREAKING CHANGE: Entries of all `*_subject_alternative_names` variables must now carry their type prefix, for example `DNS:example.local` instead of `example.local`. Co-authored-by: Copilot <copilot@github.com>	2026-09-07 22:28:52 +02:00
volker.raschek	aca86c74ab	docs(meta): add argument_specs	2026-01-14 21:53:45 +01:00