parent
d83f7639be
commit
2dafef1fab
|
@ -101,7 +101,7 @@ account:
|
||||||
returned: always
|
returned: always
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "['mailto:me@example.com', 'tel:00123456789']"
|
sample: ['mailto:me@example.com', 'tel:00123456789']
|
||||||
status:
|
status:
|
||||||
description: the account's status
|
description: the account's status
|
||||||
returned: always
|
returned: always
|
||||||
|
|
|
@ -468,7 +468,20 @@ authorizations:
|
||||||
- Maps an identifier to ACME authorization objects. See U(https://tools.ietf.org/html/rfc8555#section-7.1.4).
|
- Maps an identifier to ACME authorization objects. See U(https://tools.ietf.org/html/rfc8555#section-7.1.4).
|
||||||
returned: changed
|
returned: changed
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"example.com":{...}}'
|
sample:
|
||||||
|
example.com:
|
||||||
|
identifier:
|
||||||
|
type: dns
|
||||||
|
value: example.com
|
||||||
|
status: valid
|
||||||
|
expires: '2022-08-04T01:02:03.45Z'
|
||||||
|
challenges:
|
||||||
|
- url: https://example.org/acme/challenge/12345
|
||||||
|
type: http-01
|
||||||
|
status: valid
|
||||||
|
token: A5b1C3d2E9f8G7h6
|
||||||
|
validated: '2022-08-01T01:01:02.34Z'
|
||||||
|
wildcard: false
|
||||||
order_uri:
|
order_uri:
|
||||||
description: ACME order URI.
|
description: ACME order URI.
|
||||||
returned: changed
|
returned: changed
|
||||||
|
|
|
@ -184,7 +184,7 @@ directory:
|
||||||
description: The ACME directory's content
|
description: The ACME directory's content
|
||||||
returned: always
|
returned: always
|
||||||
type: dict
|
type: dict
|
||||||
sample: |
|
sample:
|
||||||
{
|
{
|
||||||
"a85k3x9f91A4": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
|
"a85k3x9f91A4": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
|
||||||
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
|
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
|
||||||
|
@ -204,7 +204,7 @@ headers:
|
||||||
description: The request's HTTP headers (with lowercase keys)
|
description: The request's HTTP headers (with lowercase keys)
|
||||||
returned: always
|
returned: always
|
||||||
type: dict
|
type: dict
|
||||||
sample: |
|
sample:
|
||||||
{
|
{
|
||||||
"boulder-requester": "12345",
|
"boulder-requester": "12345",
|
||||||
"cache-control": "max-age=0, no-cache, no-store",
|
"cache-control": "max-age=0, no-cache, no-store",
|
||||||
|
@ -215,7 +215,7 @@ headers:
|
||||||
"cookies_string": "",
|
"cookies_string": "",
|
||||||
"date": "Wed, 07 Nov 2018 12:34:56 GMT",
|
"date": "Wed, 07 Nov 2018 12:34:56 GMT",
|
||||||
"expires": "Wed, 07 Nov 2018 12:44:56 GMT",
|
"expires": "Wed, 07 Nov 2018 12:44:56 GMT",
|
||||||
"link": "<https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel=\"terms-of-service\"",
|
"link": '<https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel="terms-of-service"',
|
||||||
"msg": "OK (904 bytes)",
|
"msg": "OK (904 bytes)",
|
||||||
"pragma": "no-cache",
|
"pragma": "no-cache",
|
||||||
"replay-nonce": "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGH",
|
"replay-nonce": "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGH",
|
||||||
|
|
|
@ -178,7 +178,7 @@ subject:
|
||||||
returned: changed or success
|
returned: changed or success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: "[('CN', 'www.ansible.com'), ('O', 'Ansible')]"
|
sample: [['CN', 'www.ansible.com'], ['O', 'Ansible']]
|
||||||
subjectAltName:
|
subjectAltName:
|
||||||
description: The alternative names this CSR is valid for
|
description: The alternative names this CSR is valid for
|
||||||
returned: changed or success
|
returned: changed or success
|
||||||
|
|
|
@ -82,7 +82,7 @@ basic_constraints:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[CA:TRUE, pathlen:1]"
|
sample: ['CA:TRUE', 'pathlen:1']
|
||||||
basic_constraints_critical:
|
basic_constraints_critical:
|
||||||
description: Whether the C(basic_constraints) extension is critical.
|
description: Whether the C(basic_constraints) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -92,7 +92,7 @@ extended_key_usage:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[Biometric Info, DVCS, Time Stamping]"
|
sample: [Biometric Info, DVCS, Time Stamping]
|
||||||
extended_key_usage_critical:
|
extended_key_usage_critical:
|
||||||
description: Whether the C(extended_key_usage) extension is critical.
|
description: Whether the C(extended_key_usage) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -117,12 +117,12 @@ extensions_by_oid:
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: "MAMCAQU="
|
sample: "MAMCAQU="
|
||||||
sample: '{"1.3.6.1.5.5.7.1.24": { "critical": false, "value": "MAMCAQU="}}'
|
sample: {"1.3.6.1.5.5.7.1.24": { "critical": false, "value": "MAMCAQU="}}
|
||||||
key_usage:
|
key_usage:
|
||||||
description: Entries in the C(key_usage) extension, or C(none) if extension is not present.
|
description: Entries in the C(key_usage) extension, or C(none) if extension is not present.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: "[Key Agreement, Data Encipherment]"
|
sample: [Key Agreement, Data Encipherment]
|
||||||
key_usage_critical:
|
key_usage_critical:
|
||||||
description: Whether the C(key_usage) extension is critical.
|
description: Whether the C(key_usage) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -134,7 +134,7 @@ subject_alt_name:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[DNS:www.ansible.com, IP:1.2.3.4]"
|
sample: ["DNS:www.ansible.com", "IP:1.2.3.4"]
|
||||||
subject_alt_name_critical:
|
subject_alt_name_critical:
|
||||||
description: Whether the C(subject_alt_name) extension is critical.
|
description: Whether the C(subject_alt_name) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -177,13 +177,13 @@ subject:
|
||||||
- Note that for repeated values, only the last one will be returned.
|
- Note that for repeated values, only the last one will be returned.
|
||||||
returned: success
|
returned: success
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"commonName": "www.example.com", "emailAddress": "test@example.com"}'
|
sample: {"commonName": "www.example.com", "emailAddress": "test@example.com"}
|
||||||
subject_ordered:
|
subject_ordered:
|
||||||
description: The CSR's subject as an ordered list of tuples.
|
description: The CSR's subject as an ordered list of tuples.
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: '[["commonName", "www.example.com"], ["emailAddress": "test@example.com"]]'
|
sample: [["commonName", "www.example.com"], ["emailAddress": "test@example.com"]]
|
||||||
public_key:
|
public_key:
|
||||||
description: CSR's public key in PEM format
|
description: CSR's public key in PEM format
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -292,14 +292,14 @@ authority_cert_issuer:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[DNS:www.ansible.com, IP:1.2.3.4]"
|
sample: ["DNS:www.ansible.com", "IP:1.2.3.4"]
|
||||||
authority_cert_serial_number:
|
authority_cert_serial_number:
|
||||||
description:
|
description:
|
||||||
- The CSR's authority cert serial number.
|
- The CSR's authority cert serial number.
|
||||||
- Is C(none) if the C(AuthorityKeyIdentifier) extension is not present.
|
- Is C(none) if the C(AuthorityKeyIdentifier) extension is not present.
|
||||||
returned: success
|
returned: success
|
||||||
type: int
|
type: int
|
||||||
sample: '12345'
|
sample: 12345
|
||||||
'''
|
'''
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -67,7 +67,7 @@ subject:
|
||||||
returned: changed or success
|
returned: changed or success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: "[('CN', 'www.ansible.com'), ('O', 'Ansible')]"
|
sample: [['CN', 'www.ansible.com'], ['O', 'Ansible']]
|
||||||
subjectAltName:
|
subjectAltName:
|
||||||
description: The alternative names this CSR is valid for
|
description: The alternative names this CSR is valid for
|
||||||
returned: changed or success
|
returned: changed or success
|
||||||
|
|
|
@ -126,7 +126,7 @@ basic_constraints:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[CA:TRUE, pathlen:1]"
|
sample: ["CA:TRUE", "pathlen:1"]
|
||||||
basic_constraints_critical:
|
basic_constraints_critical:
|
||||||
description: Whether the C(basic_constraints) extension is critical.
|
description: Whether the C(basic_constraints) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -136,7 +136,7 @@ extended_key_usage:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[Biometric Info, DVCS, Time Stamping]"
|
sample: [Biometric Info, DVCS, Time Stamping]
|
||||||
extended_key_usage_critical:
|
extended_key_usage_critical:
|
||||||
description: Whether the C(extended_key_usage) extension is critical.
|
description: Whether the C(extended_key_usage) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -161,12 +161,12 @@ extensions_by_oid:
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: "MAMCAQU="
|
sample: "MAMCAQU="
|
||||||
sample: '{"1.3.6.1.5.5.7.1.24": { "critical": false, "value": "MAMCAQU="}}'
|
sample: {"1.3.6.1.5.5.7.1.24": { "critical": false, "value": "MAMCAQU="}}
|
||||||
key_usage:
|
key_usage:
|
||||||
description: Entries in the C(key_usage) extension, or C(none) if extension is not present.
|
description: Entries in the C(key_usage) extension, or C(none) if extension is not present.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: "[Key Agreement, Data Encipherment]"
|
sample: [Key Agreement, Data Encipherment]
|
||||||
key_usage_critical:
|
key_usage_critical:
|
||||||
description: Whether the C(key_usage) extension is critical.
|
description: Whether the C(key_usage) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -178,7 +178,7 @@ subject_alt_name:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[DNS:www.ansible.com, IP:1.2.3.4]"
|
sample: ["DNS:www.ansible.com", "IP:1.2.3.4"]
|
||||||
subject_alt_name_critical:
|
subject_alt_name_critical:
|
||||||
description: Whether the C(subject_alt_name) extension is critical.
|
description: Whether the C(subject_alt_name) extension is critical.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -197,36 +197,36 @@ issuer:
|
||||||
- Note that for repeated values, only the last one will be returned.
|
- Note that for repeated values, only the last one will be returned.
|
||||||
returned: success
|
returned: success
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"organizationName": "Ansible", "commonName": "ca.example.com"}'
|
sample: {"organizationName": "Ansible", "commonName": "ca.example.com"}
|
||||||
issuer_ordered:
|
issuer_ordered:
|
||||||
description: The certificate's issuer as an ordered list of tuples.
|
description: The certificate's issuer as an ordered list of tuples.
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: '[["organizationName", "Ansible"], ["commonName": "ca.example.com"]]'
|
sample: [["organizationName", "Ansible"], ["commonName": "ca.example.com"]]
|
||||||
subject:
|
subject:
|
||||||
description:
|
description:
|
||||||
- The certificate's subject as a dictionary.
|
- The certificate's subject as a dictionary.
|
||||||
- Note that for repeated values, only the last one will be returned.
|
- Note that for repeated values, only the last one will be returned.
|
||||||
returned: success
|
returned: success
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"commonName": "www.example.com", "emailAddress": "test@example.com"}'
|
sample: {"commonName": "www.example.com", "emailAddress": "test@example.com"}
|
||||||
subject_ordered:
|
subject_ordered:
|
||||||
description: The certificate's subject as an ordered list of tuples.
|
description: The certificate's subject as an ordered list of tuples.
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: '[["commonName", "www.example.com"], ["emailAddress": "test@example.com"]]'
|
sample: [["commonName", "www.example.com"], ["emailAddress": "test@example.com"]]
|
||||||
not_after:
|
not_after:
|
||||||
description: C(notAfter) date as ASN.1 TIME.
|
description: C(notAfter) date as ASN.1 TIME.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: 20190413202428Z
|
sample: '20190413202428Z'
|
||||||
not_before:
|
not_before:
|
||||||
description: C(notBefore) date as ASN.1 TIME.
|
description: C(notBefore) date as ASN.1 TIME.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: 20190331202428Z
|
sample: '20190331202428Z'
|
||||||
public_key:
|
public_key:
|
||||||
description: Certificate's public key in PEM format.
|
description: Certificate's public key in PEM format.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -365,14 +365,14 @@ authority_cert_issuer:
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: "[DNS:www.ansible.com, IP:1.2.3.4]"
|
sample: ["DNS:www.ansible.com", "IP:1.2.3.4"]
|
||||||
authority_cert_serial_number:
|
authority_cert_serial_number:
|
||||||
description:
|
description:
|
||||||
- The certificate's authority cert serial number.
|
- The certificate's authority cert serial number.
|
||||||
- Is C(none) if the C(AuthorityKeyIdentifier) extension is not present.
|
- Is C(none) if the C(AuthorityKeyIdentifier) extension is not present.
|
||||||
returned: success
|
returned: success
|
||||||
type: int
|
type: int
|
||||||
sample: '12345'
|
sample: 12345
|
||||||
ocsp_uri:
|
ocsp_uri:
|
||||||
description: The OCSP responder URI, if included in the certificate. Will be
|
description: The OCSP responder URI, if included in the certificate. Will be
|
||||||
C(none) if no OCSP responder URI is included.
|
C(none) if no OCSP responder URI is included.
|
||||||
|
|
|
@ -302,13 +302,13 @@ issuer:
|
||||||
- See I(name_encoding) for how IDNs are handled.
|
- See I(name_encoding) for how IDNs are handled.
|
||||||
returned: success
|
returned: success
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"organizationName": "Ansible", "commonName": "ca.example.com"}'
|
sample: {"organizationName": "Ansible", "commonName": "ca.example.com"}
|
||||||
issuer_ordered:
|
issuer_ordered:
|
||||||
description: The CRL's issuer as an ordered list of tuples.
|
description: The CRL's issuer as an ordered list of tuples.
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: '[["organizationName", "Ansible"], ["commonName": "ca.example.com"]]'
|
sample: [["organizationName", "Ansible"], ["commonName": "ca.example.com"]]
|
||||||
last_update:
|
last_update:
|
||||||
description: The point in time from which this CRL can be trusted as ASN.1 TIME.
|
description: The point in time from which this CRL can be trusted as ASN.1 TIME.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -344,7 +344,7 @@ revoked_certificates:
|
||||||
- See I(name_encoding) for how IDNs are handled.
|
- See I(name_encoding) for how IDNs are handled.
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: '["DNS:ca.example.org"]'
|
sample: ["DNS:ca.example.org"]
|
||||||
issuer_critical:
|
issuer_critical:
|
||||||
description: Whether the certificate issuer extension is critical.
|
description: Whether the certificate issuer extension is critical.
|
||||||
type: bool
|
type: bool
|
||||||
|
|
|
@ -83,23 +83,23 @@ issuer:
|
||||||
- See I(name_encoding) for how IDNs are handled.
|
- See I(name_encoding) for how IDNs are handled.
|
||||||
returned: success
|
returned: success
|
||||||
type: dict
|
type: dict
|
||||||
sample: '{"organizationName": "Ansible", "commonName": "ca.example.com"}'
|
sample: {"organizationName": "Ansible", "commonName": "ca.example.com"}
|
||||||
issuer_ordered:
|
issuer_ordered:
|
||||||
description: The CRL's issuer as an ordered list of tuples.
|
description: The CRL's issuer as an ordered list of tuples.
|
||||||
returned: success
|
returned: success
|
||||||
type: list
|
type: list
|
||||||
elements: list
|
elements: list
|
||||||
sample: '[["organizationName", "Ansible"], ["commonName": "ca.example.com"]]'
|
sample: [["organizationName", "Ansible"], ["commonName": "ca.example.com"]]
|
||||||
last_update:
|
last_update:
|
||||||
description: The point in time from which this CRL can be trusted as ASN.1 TIME.
|
description: The point in time from which this CRL can be trusted as ASN.1 TIME.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: 20190413202428Z
|
sample: '20190413202428Z'
|
||||||
next_update:
|
next_update:
|
||||||
description: The point in time from which a new CRL will be issued and the client has to check for it as ASN.1 TIME.
|
description: The point in time from which a new CRL will be issued and the client has to check for it as ASN.1 TIME.
|
||||||
returned: success
|
returned: success
|
||||||
type: str
|
type: str
|
||||||
sample: 20190413202428Z
|
sample: '20190413202428Z'
|
||||||
digest:
|
digest:
|
||||||
description: The signature algorithm used to sign the CRL.
|
description: The signature algorithm used to sign the CRL.
|
||||||
returned: success
|
returned: success
|
||||||
|
@ -118,14 +118,14 @@ revoked_certificates:
|
||||||
revocation_date:
|
revocation_date:
|
||||||
description: The point in time the certificate was revoked as ASN.1 TIME.
|
description: The point in time the certificate was revoked as ASN.1 TIME.
|
||||||
type: str
|
type: str
|
||||||
sample: 20190413202428Z
|
sample: '20190413202428Z'
|
||||||
issuer:
|
issuer:
|
||||||
description:
|
description:
|
||||||
- The certificate's issuer.
|
- The certificate's issuer.
|
||||||
- See I(name_encoding) for how IDNs are handled.
|
- See I(name_encoding) for how IDNs are handled.
|
||||||
type: list
|
type: list
|
||||||
elements: str
|
elements: str
|
||||||
sample: '["DNS:ca.example.org"]'
|
sample: ["DNS:ca.example.org"]
|
||||||
issuer_critical:
|
issuer_critical:
|
||||||
description: Whether the certificate issuer extension is critical.
|
description: Whether the certificate issuer extension is critical.
|
||||||
type: bool
|
type: bool
|
||||||
|
@ -147,7 +147,7 @@ revoked_certificates:
|
||||||
The point in time it was known/suspected that the private key was compromised
|
The point in time it was known/suspected that the private key was compromised
|
||||||
or that the certificate otherwise became invalid as ASN.1 TIME.
|
or that the certificate otherwise became invalid as ASN.1 TIME.
|
||||||
type: str
|
type: str
|
||||||
sample: 20190413202428Z
|
sample: '20190413202428Z'
|
||||||
invalidity_date_critical:
|
invalidity_date_critical:
|
||||||
description: Whether the invalidity date extension is critical.
|
description: Whether the invalidity date extension is critical.
|
||||||
type: bool
|
type: bool
|
||||||
|
|
Loading…
Reference in New Issue