d63c195bff
Emphasize that openssl_publickey doesn't support OpenSSH private keys. ( #663 )
2023-10-07 15:21:09 +02:00
99d1521266
Use semantic markup ( #626 )
...
* Enable semantic markup.
* Use semantic markup.
* Break long lines.
* Add ignores.
* Use real option, not alias.
2023-06-24 10:00:56 +02:00
1097371cf4
Be more precise about which private keys are supported in openssl_publickey. ( #532 )
2022-11-27 18:13:59 +01:00
7bbe8f467c
Document attributes ( #526 )
...
* Add 'acme' action group attribute.
* Compatibility with older ansible-core releases.
* Fix typo.
* Document standard attributes.
* Improve docs.
* Add shortcuts for common combinations.
2022-11-06 21:10:56 +01:00
0e15d6cea8
Convert yes/no to true/false. ( #503 )
2022-08-23 21:33:29 +02:00
6bf3ef47e1
Move licenses to LICENSES/, use SPDX-License-Identifier, mention all licenses in galaxy.yml ( #491 )
...
* Add SPDX license identifiers, mention all licenses in galaxy.yml.
* Add default copyright headers.
* Add headers for documents.
* Fix/add more copyright statements.
* Add copyright / license info for vendored code.
* Add extra sanity test.
* Add changelog fragment.
* Comment PSF-2.0 license out in galaxy.yml for now.
* Remove colon after 'Copyright'.
* Avoid colon after 'Copyright' in lint script.
* Mention correct filename.
* Add BSD-3-Clause.
* Improve lint script.
* Update README.
* Symlinks...
2022-07-21 07:27:26 +02:00
62272296da
Small docs improvements ( #374 )
...
* Small improvements.
* Document behavior changes.
2022-01-10 12:05:09 +00:00
a539cd6939
Prepare for distutils.version being removed in Python 3.12 ( #353 )
...
* Prepare for distutils.version being removed in Python 2.12.
* Fix copy'n'paste error.
* Re-add Loose prefix.
* Fix Python version typo.
* Improve formulation.
* Move message into own line.
* Fix casing, now that the object is no longer called Version.
2021-12-24 11:28:14 +01:00
f644db3c79
Remove PyOpenSSL backends (except for openssl_pkcs12) ( #273 )
...
* Remove Ubuntu 16.04 (Xenial Xerus) from CI.
* Removing PyOpenSSL backend from everywhere but openssl_pkcs12.
* Remove PyOpenSSL support from module_utils that's not needed for openssl_pkcs12.
* Add changelog fragment.
2021-09-28 17:46:35 +02:00
9658a34605
Replace ansible.module_utils._text by ansible.module_utils.common.text.converters. ( #253 )
2021-06-26 13:45:28 +02:00
376d7cde12
Avoid crash in check mode ( #243 )
...
* Do not let AnsibleModule crash when setting permissions on not yet existing files in check mode.
* Add tests.
* Fix bugs.
2021-06-02 16:44:26 +02:00
2bf0bb5fb3
Add diff support ( #150 )
...
* Add diff support to openssl_privatekey.
* Add diff support to openssl_csr.
* Add diff support to x509_crl.
* Add diff support to x509_certificate.
* Add diff support to openssl_publickey.
* Add changelog fragment.
* Prefer one fingerprint for diff infos to reduce noise.
* Apply suggestions from code review
Co-authored-by: Ajpantuso <ajpantuso@gmail.com>
Co-authored-by: Ajpantuso <ajpantuso@gmail.com>
2021-05-23 19:25:23 +00:00
69335a8bac
Refactor x509_certificate module, add x509_certificate_pipe module ( #135 )
...
* Move documentation to doc fragment.
* Prepare module backends.
* Linting.
* Fix comments.
* First shot at actually moving code.
* Forgot SKI check.
* Remove unused imports.
* Improve check mode.
* Fix 'returned'.
* Move csr_* checks.
* Explicitly specify parameter.
* Add x509_certificate_pipe module.
* Update other seealsos.
* Forgot to remove doc fragment.
* Adjust to work with macOS 10.15.
* Update plugins/module_utils/crypto/module_backends/certificate_entrust.py
Co-authored-by: Chris Trufan <31186388+ctrufan@users.noreply.github.com>
* Add changelog fragments for entrust bugfix and module refactorings.
* Restore old behavior of Entrust backend when existing certificate cannot be parsed.
* Update plugins/modules/x509_certificate_pipe.py
Co-authored-by: Chris Trufan <31186388+ctrufan@users.noreply.github.com>
* Remove Entrust provider from x509_certificate_pipe for now.
* Add own CA tests.
* One more fix for Entrust provider, when csr_content is used.
* Update plugins/modules/x509_certificate_pipe.py
Co-authored-by: Chris Trufan <31186388+ctrufan@users.noreply.github.com>
* Fix another broken example.
* Revert "Remove Entrust provider from x509_certificate_pipe for now."
This reverts commit 6ee5d7d4f99f0fe2218276a2d3f1f38b676c29b9.
* ci_complete
* Apply suggestions from code review
Co-authored-by: MarkusTeufelberger <mteufelberger@mgit.at>
* Improve example.
* Improve readability of example, add another one.
* Extend descriptions of csr_* for selfsigned.
* Improve documentation.
* Move deprecation message up.
* Explain empty choices.
Co-authored-by: Chris Trufan <31186388+ctrufan@users.noreply.github.com>
Co-authored-by: MarkusTeufelberger <mteufelberger@mgit.at>
2020-11-24 17:21:52 +01:00
233d1afc29
CVE-2020-25646: no_log=True missing for private key content options ( #125 )
...
* Mark private key content options as no_log (CVE-2020-25646.)
* Mention no_log for openssl_privatekey's return_content option.
* Add change PR's URL.
* Plural.
2020-10-13 14:14:05 +02:00
390cb1ccc1
Prepare release ( #75 )
...
* Improve changelog generator config.
* We don't have docs at that URL.
* Require Ansible(-base) 2.9.10 or newer.
Needed for deprecation syntax.
* Update all deprecations from Ansible 2.1x to community.crypto 2.0.0.
* Forgot to check in fixes.
* Shorten lines.
* Fix unit test requirements.
* Fix YAML strings which only had a closing quote.
* Galaxy neither likes uppercase nor spaces in tags.
* General README improvements.
* Add roadmap section to README.
* Next release will be 1.0.0.
* Extend using instructions.
* Tags with dashes are also not allowed.
* Fix changelog link.
2020-07-01 13:49:25 +02:00
109edecd78
Add version_added: 1.0.0 for all new features. ( #37 )
2020-06-29 15:21:35 +02:00
cc45650e82
Use fqcn for modules listed in M() and seealso. ( #72 )
2020-06-17 10:29:18 +02:00
9e5969a644
Remove ANSIBLE_METADATA from modules. ( #49 )
2020-05-14 13:22:12 +02:00
9a096dd146
Refactor module_utils/crypto.py ( #27 )
...
* Refactor module_utils/crypto.py: split up into multiple smaller modules
* Remove superfluous files.
* Fix sanity errors.
* Move CRL entry dumping code to module_utils.
* Move obj2txt usage from CRL modules to module_utils/crpyto/cryptography_crl.
* Move generic I/O functions to plugins/module_utils/io.py.
* Add helper method for retrieving serial number of certificate.
* Add compatibility code into __init__.py.
* Fix syntax error, and add ignore.txt entries for non-empty __init__.
2020-05-12 11:19:42 +02:00
5a6858472c
Remove version_added from return values. ( #28 )
2020-04-13 23:59:40 +02:00
f7dbd61fa7
Rename openssl_certificate* to x509_certificate* ( #7 )
...
* Rename openssl_certificate* to x509_certificate*.
* Update README.
* Add redirects.
* Also print warnings when using Ansible 2.9.
* Adjust ignore-2.9.txt.
* Update documentation.
2020-04-06 14:34:24 +02:00
4d157b93ee
Use FQCN in examples. ( #12 )
2020-03-31 16:23:45 +02:00
70615300fb
Remove dependency on ansible.netcommon collection ( #2 )
...
* Get rid of ansible.netcommon requirement by integrating module_utils/compat/ipaddress.py.
* Reorder imports.
* Update ignore.txt for plugins/module_utils/compat/ipaddress.py.
* Linting (flake8 / pep8).
* Remove accidentally commited test for ansible/ansible#66920 .
2020-03-29 18:44:40 +02:00
a9f45b4d5b
Initial commit
2020-03-09 13:11:34 +00:00
Felix Fontein
Toshio Kuratomi
Ansible Core Team