Certificate missing information ?

[emper0r]

Describe the bug

Hi, i'm using your role to generate CA certificate with server certificate but windows not recognized as CA root, because say missing information.
on the contrary, the server certificate issued by the CA is ok.... ,

I need it to connect sssd into Active directory and can't conectad using ldaps, using ldap without certificate works fine.

Playbook

playbook works fine, and output is fine because create ca, and certificate correctly using all tasks without error...
the info is all completed but

Output

Environment

• Control node OS: CentOS 8
• Control node Ansible version: 4.3.0
• Managed node OS: CentOS 8

[emper0r]

More info: If I do

openssl x509 -in certificate.crt -noout text

I can see this line

 CA:FALSE

must be true ??
in default/main.yml is set

ca_own_root = True

[emper0r]

nevermind i can solve the certificate issue... now i guess is trouble with sssd. thanks for your role

[emper0r]

Hi again @robertdebock
where can I set in the role the Certificate Revocation List to can verify with client if the CA is authentic or not?
https://jamielinux.com/docs/openssl-certificate-authority/certificate-revocation-lists.html#certificate-revocation-lists

I think that's why can't authenticate still usind sssd with the certificate because can't verify if is ok or not the CA even if is imported inside of my CentOS server

[emper0r]

Hi @robertdebock any idea about it !?