diff --git a/README.md b/README.md index 5b6c991..9aeb0c2 100644 --- a/README.md +++ b/README.md @@ -7,3 +7,7 @@ A simple role to create a CA to create certificates and deploy them to hosts. The intended use is to create certificates you can use for connecting clients to main systems. + +## Variables ## + +* `ca_ca_days`: Runtime of the CA certificate (default: `3650`) diff --git a/defaults/main.yml b/defaults/main.yml index 9a98c78..9b22165 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -3,6 +3,7 @@ ca_ca: false ca_manage_openssl: true ca_ca_dir: /opt/ca +ca_ca_days: 3650 ca_ca_password: ChangeMe ca_country: EX diff --git a/tasks/ca.yml b/tasks/ca.yml index 4807764..bc357c1 100644 --- a/tasks/ca.yml +++ b/tasks/ca.yml @@ -40,7 +40,7 @@ -key {{ ca_ca_dir }}/ca.key -passin pass:{{ ca_ca_password }} -sha256 - -days 3650 + -days {{ ca_ca_days }} -out {{ ca_ca_dir }}/ca.crt -config {{ ca_ca_dir }}/ca.conf args: