From 9e10cfb53a8251c1c4a3aad5aa5969437a88407a Mon Sep 17 00:00:00 2001 From: Felix Fontein Date: Sat, 23 Nov 2024 15:44:06 +0100 Subject: [PATCH] Update the PKCS#12 encryption warning. (#820) --- plugins/modules/openssl_pkcs12.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/plugins/modules/openssl_pkcs12.py b/plugins/modules/openssl_pkcs12.py index e3b99308..28efa048 100644 --- a/plugins/modules/openssl_pkcs12.py +++ b/plugins/modules/openssl_pkcs12.py @@ -103,9 +103,11 @@ options: passphrase: description: - The PKCS#12 password. - - "B(Note:) PKCS12 encryption is not secure and should not be used as a security mechanism. + - "B(Note:) PKCS12 encryption is typically not secure and should not be used as a security mechanism. If you need to store or send a PKCS12 file safely, you should additionally encrypt it - with something else." + with something else. + (L(Source, + https://cryptography.io/en/latest/hazmat/primitives/asymmetric/serialization/#cryptography.hazmat.primitives.serialization.pkcs12.serialize_key_and_certificates).)" type: str path: description: