25 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
volker.raschekandCopilot	38ab2f55bb	fix: drop passphrase from CSR task for unencrypted client key ... This task file is only included when `certificate_authority_client_tls_key_passphrase` is empty, so the private key is created without encryption. Passing the empty passphrase to `openssl_csr` made the module attempt to decrypt an unencrypted key instead of treating it as absent. The sibling CSR task for certificates with SANs already omitted the attribute, so this also aligns both code paths. Co-authored-by: Copilot <copilot@github.com>	2026-09-07 22:28:52 +02:00
volker.raschekandCopilot	309c5e0e65	fix: use client path instead of certificate content as destination ... The task importing the client certificate passed `certificate_authority_client_tls_crt_content` to `dest`, so the PEM payload itself was interpreted as a directory path. The certificate was written to a bogus location derived from its own content instead of the configured client directory. Use `certificate_authority_client_path` as destination, consistent with the private key import above. Co-authored-by: Copilot <copilot@github.com>	2026-09-07 22:28:52 +02:00
volker.raschekandCopilot	32bd44a0a6	fix: use declared variable for client private key destination ... The task importing the client private key referenced `certificate_authority_client_ca_path`, a variable that is declared neither in `defaults/main.yaml` nor in `meta/argument_specs.yaml`. Every run with `certificate_authority_client_create: false` therefore aborted with an undefined variable error before the key was written. Use the actual role variable `certificate_authority_client_path` instead. Co-authored-by: Copilot <copilot@github.com>	2026-09-07 22:28:52 +02:00
volker.raschek	b112672d5a	fix(tasks): create passphrase protected client certificate	2026-09-07 22:28:52 +02:00
volker.raschek	aca86c74ab	docs(meta): add argument_specs	2026-01-14 21:53:45 +01:00
volker.raschek	2355a9b3ed	fix(ci): add workflow dispatch for releases	2026-01-11 21:15:33 +01:00
volker.raschek	41fc9dd544	fix(ci): use dynamic github repository name	2026-01-07 16:11:05 +01:00
volker.raschek	580ddabd36	fix(ci): add release workflow	2026-01-07 16:05:28 +01:00
volker.raschek	f9f3968b68	fix: replace deprecated INJECT_FACTS_AS_VARS	2026-01-05 10:26:11 +01:00
volker.raschek	972c43c8fa	fix: rename files to .yaml	2025-11-23 16:14:35 +01:00
volker.raschek	e38f894c8f	chore(deps): update actions/checkout to v5.0.0	2025-09-18 22:31:07 +02:00
volker.raschek	594325b852	fix(ansible-galaxy): adapt indentation	2025-08-06 16:10:23 +02:00
volker.raschek	f3e818b07c	fix(ansible-galaxy): add namespace	2025-08-06 15:22:26 +02:00
volker.raschek	29c166acda	fix(ansible-galaxy): adapt list of supported platforms	2025-08-06 11:44:49 +02:00
volker.raschek	a14c799290	fix(ansible-galaxy): remove namespace	2025-08-06 11:39:09 +02:00
volker.raschek	6208d55dcb	fix(linter): be compliant with ansible-linter	2025-08-06 10:55:42 +02:00
volker.raschek	ac6f54d360	fix(galaxy): change namespace from volker-raschek to volker_raschek	2025-08-06 10:53:30 +02:00
volker.raschek	9267a743e7	docs(README): update documentation	2025-07-31 19:12:06 +02:00
volker.raschek	ef2c31e64e	fix: remove state	2025-07-31 19:08:10 +02:00
volker.raschek	1c40b1d59b	feat: support further TLS certification properties	2025-07-31 18:46:19 +02:00
volker.raschek	c3fb49bbd4	fix(root_ca): set passphrase correctly	2025-07-31 11:56:27 +02:00
volker.raschek	61b0a7c9ec	fix: set cipher correctly	2025-07-31 09:53:01 +02:00
volker.raschek	dbbaacdc69	fix(root_ca): set passphrase correctly	2025-07-31 09:49:12 +02:00
volker.raschek	505f0450d4	fix(intermediate_ca): set passphrase correctly	2025-07-31 09:48:51 +02:00
volker.raschek	a0ea59c528	Initial Commit	2025-07-30 22:09:38 +02:00