Support custom X509 extensions when generating a CSR #966

zajdee · 2025-11-04T09:43:16Z

SUMMARY

This change implements the support of custom X509 extensions when generating a CSR.

Due to the need for an ASN.1 encoder, this change pulls a new component, pyasn1 (Github page), into the project. Encoder compatibility with pyasn1 versions back to 0.4.8 was tested. This extra Python component is only needed when custom_extensions are specified.

Because there can be various scenarios when generating the certificate request using Ansible, the values can be provided as raw data, raw Base64-encoded data, or as one of the following supported data types: int, real (float), bool, and str.

Empty extension value is not supported, and if specified, it either breaks the run, or (if allowed) such an extension definition is skipped.

Fixes #401

ISSUE TYPE

Feature Pull Request

COMPONENT NAME

The CSR generating backend, docs, and tests were modified.

ADDITIONAL INFORMATION

A potential use of this new feature is as follows:

- name: Generate mTLS CSR
  community.crypto.openssl_csr:
(...)
  custom_extensions:
      - oid: 1.3.6.1.4.1.34380.1.1.12
        value: "DE"
        critical: false
        skip_if_empty: true
      - oid: 1.3.6.1.4.1.34380.1.1.13
        value: ""
        critical: false
        skip_if_empty: true
      - oid: 1.3.6.1.4.1.34380.1.1.14
        value: 17
        value_type: int
        critical: false
      - oid: 1.3.6.1.4.1.34380.1.1.15
        value: 3.14
        value_type: real
        critical: false
      - oid: 1.3.6.1.4.1.34380.1.1.16
        value: true
        value_type: bool
        critical: false
      - oid: 1.3.6.1.4.1.34380.1.1.17
        value: false
        value_type: bool
        critical: false
      - oid: 1.3.6.1.4.1.34380.1.1.18
        value_raw: "DE"
        critical: false
        skip_if_empty: true
      - oid: 1.3.6.1.4.1.34380.1.1.19
        value_b64: "REU=" # DE
        critical: true
        skip_if_empty: true

zajdee · 2025-11-04T09:46:12Z

Hello, this is my first PR to this project, so please accept my apologies if something breaks. For starters, I am not sure how to run tests locally - any hint is appreciated.

I have successfully generated CSRs with custom extensions by using this modified code, but there might be edge cases that I didn't hit.

The code currently doesn't check for any collision between the extensions added by the module and specified by the user, it doesn't even check if a custom extension (with the same OID) is defined multiple times by the user. The second part could be probably added easily.

github-actions · 2025-11-04T11:39:47Z

Docs Build 📝

Thank you for contribution!✨

The docs for this PR have been published here:
https://ansible-collections.github.io/community.crypto/pr/966

You can compare to the docs for the main branch here:
https://ansible-collections.github.io/community.crypto/branch/main

The docsite for this PR is also available for download as an artifact from this run:
https://github.com/ansible-collections/community.crypto/actions/runs/19132087252

File changes:

M openssl_csr_module.html

M openssl_csr_pipe_module.html

Click to see the diff comparison.

NOTE: only file modifications are shown here. New and deleted files are excluded.
See the file list and check the published docs to see those files.

diff --git a/home/runner/work/community.crypto/community.crypto/docsbuild/base/openssl_csr_module.html b/home/runner/work/community.crypto/community.crypto/docsbuild/head/openssl_csr_module.html
index 25beb80..c88b004 100644
--- a/home/runner/work/community.crypto/community.crypto/docsbuild/base/openssl_csr_module.html
+++ b/home/runner/work/community.crypto/community.crypto/docsbuild/head/openssl_csr_module.html
@@ -214,6 +214,7 @@ see <a class="reference internal" href="#ansible-collections-community-crypto-op
 <p>The below requirements are needed on the host that executes this module.</p>
 <ul class="simple">
 <li><p>cryptography &gt;= 3.3</p></li>
+<li><p>pyasn1 &gt;= 0.4.8 (only if <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions"><span class="std std-ref"><span class="pre">custom_extensions</span></span></a></strong></code> are specified)</p></li>
 </ul>
 </section>
 <section id="parameters">
@@ -390,6 +391,83 @@ see <a class="reference internal" href="#ansible-collections-community-crypto-op
 </div></td>
 </tr>
 <tr class="row-odd"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions"><strong>custom_extensions</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=dictionary</span></p>
+<p><em class="ansible-option-versionadded">added in community.crypto 3.1.0</em></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Allows to specify one or multiple custom extensions.</p>
+<p>The extension value must not be empty, unless <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-skip-if-empty"><span class="std std-ref"><span class="pre">custom_extensions[].skip_if_empty</span></span></a></strong></code> is specified.</p>
+<p>In such case the extension will be skipped instead of throwing an error.</p>
+<p>Custom extensions require the <code class="ansible-value docutils literal notranslate"><span class="pre">pyasn1</span></code> Python package to be installed in the environment where the code is run.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/critical"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-critical"><strong>critical</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/critical" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Set the critical flag.</p>
+<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
+<ul class="simple">
+<li><p><code class="ansible-option-default-bold docutils literal notranslate"><strong><span class="pre">false</span></strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><code class="ansible-option-choices-entry docutils literal notranslate"><span class="pre">true</span></code></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/oid"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-oid"><strong>oid</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/oid" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The OID of the custom extension</p>
+<p>Example: <code class="ansible-value docutils literal notranslate"><span class="pre">1.3.6.1.4.1.34380.1.1.25</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/skip_if_empty"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-skip-if-empty"><strong>skip_if_empty</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/skip_if_empty" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Allow empty value to be specified. In such case the extension will be skipped when processing.</p>
+<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
+<ul class="simple">
+<li><p><code class="ansible-option-default-bold docutils literal notranslate"><strong><span class="pre">false</span></strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><code class="ansible-option-choices-entry docutils literal notranslate"><span class="pre">true</span></code></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value"><strong>value</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The value of the custom extension.</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-raw"><span class="std std-ref"><span class="pre">custom_extensions[].value_raw</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-b64"><span class="std std-ref"><span class="pre">custom_extensions[].value_b64</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_b64"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-b64"><strong>value_b64</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_b64" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The raw value of the custom extension, base64 encoded. Will be decoded, then copied to the extension as-is.</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-raw"><span class="std std-ref"><span class="pre">custom_extensions[].value_raw</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_raw"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-raw"><strong>value_raw</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_raw" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The raw value of the custom extension. Will be copied to the extension as-is.</p>
+<p>The value is always assumed to be an UTF8String</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-b64"><span class="std std-ref"><span class="pre">custom_extensions[].value_b64</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_type"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value-type"><strong>value_type</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_type" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The type of the value. Only valid if <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> is specified.</p>
+<p>Supported data types are: <code class="ansible-value docutils literal notranslate"><span class="pre">str</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">bool</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">int</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">real</span></code>.</p>
+<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-option-default docutils literal notranslate"><span class="pre">&quot;str&quot;</span></code></p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-cell">
 <div class="ansibleOptionAnchor" id="parameter-digest"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-module-parameter-digest"><strong>digest</strong></p>
 <a class="ansibleOptionLink" href="#parameter-digest" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
 </div></td>
diff --git a/home/runner/work/community.crypto/community.crypto/docsbuild/base/openssl_csr_pipe_module.html b/home/runner/work/community.crypto/community.crypto/docsbuild/head/openssl_csr_pipe_module.html
index 0f30558..6f39611 100644
--- a/home/runner/work/community.crypto/community.crypto/docsbuild/base/openssl_csr_pipe_module.html
+++ b/home/runner/work/community.crypto/community.crypto/docsbuild/head/openssl_csr_pipe_module.html
@@ -215,6 +215,7 @@ see <a class="reference internal" href="#ansible-collections-community-crypto-op
 <p>The below requirements are needed on the host that executes this module.</p>
 <ul class="simple">
 <li><p>cryptography &gt;= 3.3</p></li>
+<li><p>pyasn1 &gt;= 0.4.8 (only if <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions"><span class="std std-ref"><span class="pre">custom_extensions</span></span></a></strong></code> are specified)</p></li>
 </ul>
 </section>
 <section id="parameters">
@@ -374,6 +375,83 @@ see <a class="reference internal" href="#ansible-collections-community-crypto-op
 </div></td>
 </tr>
 <tr class="row-even"><td><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions"><strong>custom_extensions</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">list</span> / <span class="ansible-option-elements">elements=dictionary</span></p>
+<p><em class="ansible-option-versionadded">added in community.crypto 3.1.0</em></p>
+</div></td>
+<td><div class="ansible-option-cell"><p>Allows to specify one or multiple custom extensions.</p>
+<p>The extension value must not be empty, unless <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-skip-if-empty"><span class="std std-ref"><span class="pre">custom_extensions[].skip_if_empty</span></span></a></strong></code> is specified.</p>
+<p>In such case the extension will be skipped instead of throwing an error.</p>
+<p>Custom extensions require the <code class="ansible-value docutils literal notranslate"><span class="pre">pyasn1</span></code> Python package to be installed in the environment where the code is run.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/critical"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-critical"><strong>critical</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/critical" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Set the critical flag.</p>
+<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
+<ul class="simple">
+<li><p><code class="ansible-option-default-bold docutils literal notranslate"><strong><span class="pre">false</span></strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><code class="ansible-option-choices-entry docutils literal notranslate"><span class="pre">true</span></code></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/oid"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-oid"><strong>oid</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/oid" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The OID of the custom extension</p>
+<p>Example: <code class="ansible-value docutils literal notranslate"><span class="pre">1.3.6.1.4.1.34380.1.1.25</span></code>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/skip_if_empty"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-skip-if-empty"><strong>skip_if_empty</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/skip_if_empty" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">boolean</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>Allow empty value to be specified. In such case the extension will be skipped when processing.</p>
+<p class="ansible-option-line"><strong class="ansible-option-choices">Choices:</strong></p>
+<ul class="simple">
+<li><p><code class="ansible-option-default-bold docutils literal notranslate"><strong><span class="pre">false</span></strong></code> <span class="ansible-option-choices-default-mark">← (default)</span></p></li>
+<li><p><code class="ansible-option-choices-entry docutils literal notranslate"><span class="pre">true</span></code></p></li>
+</ul>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value"><strong>value</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The value of the custom extension.</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-raw"><span class="std std-ref"><span class="pre">custom_extensions[].value_raw</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-b64"><span class="std std-ref"><span class="pre">custom_extensions[].value_b64</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_b64"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-b64"><strong>value_b64</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_b64" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The raw value of the custom extension, base64 encoded. Will be decoded, then copied to the extension as-is.</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-raw"><span class="std std-ref"><span class="pre">custom_extensions[].value_raw</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_raw"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-raw"><strong>value_raw</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_raw" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The raw value of the custom extension. Will be copied to the extension as-is.</p>
+<p>The value is always assumed to be an UTF8String</p>
+<p>Mutually exclusive with <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> and <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-b64"><span class="std std-ref"><span class="pre">custom_extensions[].value_b64</span></span></a></strong></code>.</p>
+</div></td>
+</tr>
+<tr class="row-odd"><td><div class="ansible-option-indent"></div><div class="ansible-option-cell">
+<div class="ansibleOptionAnchor" id="parameter-custom_extensions/value_type"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value-type"><strong>value_type</strong></p>
+<a class="ansibleOptionLink" href="#parameter-custom_extensions/value_type" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
+</div></td>
+<td><div class="ansible-option-indent-desc"></div><div class="ansible-option-cell"><p>The type of the value. Only valid if <code class="ansible-option docutils literal notranslate"><strong><a class="reference internal" href="#ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-custom-extensions-value"><span class="std std-ref"><span class="pre">custom_extensions[].value</span></span></a></strong></code> is specified.</p>
+<p>Supported data types are: <code class="ansible-value docutils literal notranslate"><span class="pre">str</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">bool</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">int</span></code>, <code class="ansible-value docutils literal notranslate"><span class="pre">real</span></code>.</p>
+<p class="ansible-option-line"><strong class="ansible-option-default-bold">Default:</strong> <code class="ansible-option-default docutils literal notranslate"><span class="pre">&quot;str&quot;</span></code></p>
+</div></td>
+</tr>
+<tr class="row-even"><td><div class="ansible-option-cell">
 <div class="ansibleOptionAnchor" id="parameter-digest"></div><p class="ansible-option-title" id="ansible-collections-community-crypto-openssl-csr-pipe-module-parameter-digest"><strong>digest</strong></p>
 <a class="ansibleOptionLink" href="#parameter-digest" title="Permalink to this option"></a><p class="ansible-option-type-line"><span class="ansible-option-type">string</span></p>
 </div></td>

zajdee · 2025-11-04T16:42:50Z

@felixfontein Hello, unfortunately I cannot add you as a reviewer, I hope you don't mind this ping. When you have time, could you please check this PR? Thank you.

zajdee added 2 commits November 4, 2025 10:30

Add support for custom extensions

0b080f4

Small reformatting changes

110cd6b

Formatting improvements and corrections

1c1ad4e

zajdee added 13 commits November 4, 2025 12:46

Tolerate failed imports of pyasn1 when custom_extensions aren't used

bbf705b

Fix test errors

9631f37

Correct pyasn1 package names for RHEL/Rocky

e3d4c10

Add non-check tests too

b3d5fc3

Cleanups from test results

16af042

Add more hooks to install pyasn1

9d5560b

Add test requirements

cd63cd1

Move requirements.txt to the root

6f0f01e

Add types-pyasn1 to antsibull-nox.toml

6324851

Move the base64 import to the beginning of the file

343e8fd

Return an empty line to csr.py, isort is getting crazy

3c73447

Reformat csr.py using black

2ed630b

Tidying up

a058a1f

Update the formatting in the docs, add the forgotten Suse package naems

f70f121

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Support custom X509 extensions when generating a CSR #966

Support custom X509 extensions when generating a CSR #966

Uh oh!

zajdee commented Nov 4, 2025 •

edited

Loading

Uh oh!

zajdee commented Nov 4, 2025

Uh oh!

github-actions bot commented Nov 4, 2025 •

edited

Loading

Uh oh!

zajdee commented Nov 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Support custom X509 extensions when generating a CSR #966

Are you sure you want to change the base?

Support custom X509 extensions when generating a CSR #966

Uh oh!

Conversation

zajdee commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SUMMARY

ISSUE TYPE

COMPONENT NAME

ADDITIONAL INFORMATION

Uh oh!

zajdee commented Nov 4, 2025

Uh oh!

github-actions bot commented Nov 4, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Docs Build 📝

Uh oh!

zajdee commented Nov 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

zajdee commented Nov 4, 2025 •

edited

Loading

github-actions bot commented Nov 4, 2025 •

edited

Loading