Skip to content

openssl_csr: allow to add arbitrary extensions #401

@felixfontein

Description

@felixfontein
SUMMARY

See ansible/ansible#61473 for details.

The idea is to allow to specify arbitrary extension OIDs with values and critical flags. The module should add them to the CSR (resp. ensure they are present in the CSR), and make sure they don't collide with extensions added by the module itself.

Now that cryptography allows to serialize and deserialize arbitrary extensions, we can properly implement it.

ISSUE TYPE
  • Feature Idea
COMPONENT NAME

openssl_csr

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions