e560acdac5
Remove distutils from unit tests. ( #444 )
2022-04-21 11:05:18 +02:00
9d03178b00
Fix crash in x509_crl when certificate issuer is specified ( #441 )
...
* Fix x509_crl certificate issuer issue.
* Add tests.
* Add changelog fragment.
2022-04-18 08:17:27 +02:00
041fff5057
Add persistent and perf options to the luks_device ( #434 )
...
Read and write work queue significantly degrades performance on
SSD/NVME devices[1].
In Debian 11 crypttab does not support no-read-workqueue and
no-write-workqueue flags, so the persistent flag is workaround: once
opened with perf parameters persists forever.
[1] https://blog.cloudflare.com/speeding-up-linux-disk-encryption/
Signed-off-by: Yauhen Artsiukhou <jsirex@gmail.com>
2022-04-10 14:30:10 +02:00
c7f581daad
Switch from antsibull to antsibull-docs. ( #438 )
2022-04-10 10:43:36 +02:00
b47168994d
Remove OpenSuSE Python 2 from devel CI. ( #435 )
2022-04-02 18:09:09 +02:00
635b25519b
Document OpenSSH 7.7 required for validity always ( #429 )
...
* Document OpenSSH 7.7 required for validity always
* Document cert start time option for OpenSSH <7.7
* Improve language of "always" time support
* Update language on `always` to suggested
* Fix indetation
2022-04-02 12:02:42 -04:00
bc00c30faf
Replace antsibull-lint collection-docs with antsibull-docs lint-collection-docs. ( #432 )
2022-03-30 08:00:14 +02:00
a28b2a5b4b
Add stable-2.13 to CI, thin out older version matrix ( #425 )
...
* Add stable-2.13 to CI, thin out older version matrix.
* Thin out a bit more.
2022-03-29 06:49:38 +02:00
9e611a6148
Next expected release is 2.3.0.
2022-03-22 13:44:19 +01:00
025091c3fb
Release 2.2.4
2022-03-22 13:17:36 +01:00
b0cede8231
Prepare 2.2.4 release.
2022-03-22 07:31:54 +01:00
22084b26d4
Add collection links file. ( #421 )
2022-03-22 07:04:23 +01:00
867158a942
Run ACME tests on more targets. ( #419 )
2022-03-12 08:55:06 +01:00
033bab7db1
openssh_* - catch and report top-level exceptions via `fail_json` ( #417 )
...
* ensure exceptions are properly reported
* adding changelog fragment
* applying review suggestions
* typo
* adding back exception msg
2022-03-08 13:23:09 +01:00
47d9fad45f
Next expected release is 2.3.0.
2022-03-04 08:12:32 +01:00
f82dcbea21
Release 2.2.3.
2022-03-04 07:38:44 +01:00
67f511b5ad
Prepare 2.2.3 release.
2022-03-03 21:18:07 +01:00
010f1a4d2d
fixing public key return value docs ( #412 )
2022-03-02 13:52:07 +01:00
0d4b3ed991
Fix parsing of lsblk output. ( #410 )
2022-03-02 13:48:38 +01:00
2f2c8b57e8
Next expected release is 2.3.0.
2022-02-21 22:41:39 +01:00
b952b103e2
Releasing 2.2.2.
2022-02-21 22:11:55 +01:00
c85659ebfc
Prepare 2.2.2 release.
2022-02-19 18:55:41 +01:00
73c8577b61
Integrate Alpine into CI ( #408 )
...
* Integrate Alpine into CI.
* Fix package names.
2022-02-19 17:54:05 +00:00
84c1a20af7
CI: add community ansible-test images ( #404 )
...
* Use community ansible-test images.
* Adjust tests for new operating systems, and pass on Python version as well.
* Fix Python version.
Co-authored-by: David Moreau Simard <moi@dmsimard.com>
* Fix package name.
Co-authored-by: David Moreau Simard <moi@dmsimard.com>
2022-02-17 22:29:50 +01:00
28729657ac
x509_certificate: check existing certificate's signature for selfsigned and ownca provider ( #407 )
...
* Verify whether signature matches.
* Add changelog fragment.
* Forgot imports.
* Fix wrong name.
* Check whether the CA private key fits to the CA certificate. Use correct key in tests.
* Refactor code.
2022-02-16 07:38:11 +01:00
3ebc132c03
Regenerate certificate on CA's subject change. ( #402 )
2022-02-14 18:04:29 +01:00
11a14543c8
certificate_complete_chain: handle duplicate intermediate subjects ( #403 )
...
* Allow multiple intermediate CAs to have same subject.
* Add tests.
* Fix test name.
* Don't use CN for SAN.
* Make a bit more compatible.
* Include jinja2 compat for CentOS 6.
2022-02-14 13:29:19 +01:00
7e92f04c93
Next expected release is 2.3.0.
2022-02-05 21:51:19 +01:00
8a74b3e259
Release 2.2.1.
2022-02-05 21:28:47 +01:00
a9fcd584e9
Prepare 2.2.1 release.
2022-02-05 20:18:32 +01:00
a307618872
openssh_cert - fix full_idempotence for host certificates ( #396 )
...
* fixing host cert idempotence
* adding changelog fragment
2022-02-04 20:53:50 +01:00
12749088a0
Next expected release is 2.3.0.
2022-02-01 06:25:49 +01:00
90da233341
Release 2.2.0.
2022-02-01 05:49:27 +01:00
23226dce8f
Drop CentOS 8 from CI. ( #393 )
2022-01-31 21:17:41 +00:00
9faed1dad0
Prepare 2.2.0 release.
2022-01-31 06:02:48 +01:00
ea2e45d63f
Set LANG and similar env variables to prevent translated cryptsetup output. ( #388 )
2022-01-30 21:30:56 +01:00
5abfe8fca9
PyOpenSSL 22.0.0 no longer supports Python 2.7. ( #387 )
2022-01-30 13:59:32 +01:00
b339e71973
Added 'ignore_timestamps' parameter ( #381 )
...
* Added 'ignore_timestamps' parameter
* Update plugins/modules/openssh_cert.py
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
* Update plugins/modules/openssh_cert.py
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
* Update plugins/modules/openssh_cert.py
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
* Added fragment
* Update plugins/modules/openssh_cert.py
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
* added ignore_timestamps to example
* corrected styling
* fixed styling (again)
* Update changelogs/fragments/381_openssh_cert_add_ignore_timestamps.yml
Co-authored-by: Felix Fontein <felix@fontein.de>
* splitted description as suggested by felixfontein
* fixed linebreak
* Mentioned ignore_timestamps in regenerate
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
Co-authored-by: Felix Fontein <felix@fontein.de>
2022-01-20 16:15:50 +01:00
a467f036b1
Fix indentation of when in example. ( #382 )
2022-01-18 21:52:53 +01:00
cd5ed011a5
Update CI matrix for Remote Devel ( #377 )
...
* Update CI matrix for Remote Devel.
* Add Python info entries.
2022-01-13 09:18:48 +01:00
9dfdaaf471
Next expected release is 2.2.0.
2022-01-10 23:03:02 +01:00
950d1d072f
Release 2.1.0.
2022-01-10 22:48:03 +01:00
cb14e73c61
Prepare 2.1.0 release.
2022-01-10 21:03:19 +01:00
bd2bd79497
Add openssl_privatekey_convert module ( #362 )
...
* Add openssl_privatekey_convert module.
* Extend tests and fix bugs.
* Fix wrong required.
* Fix condition.
* Fix bad tests.
* Fix documentation for format.
* Fix copyright lines.
2022-01-10 21:01:52 +01:00
62272296da
Small docs improvements ( #374 )
...
* Small improvements.
* Document behavior changes.
2022-01-10 12:05:09 +00:00
1b0fcde862
Fix comment. ( #372 )
2022-01-06 12:56:10 +00:00
46f39efc43
Use vendored copy of distutils.version. ( #369 )
2022-01-05 21:30:11 +01:00
b2ea4a7ce5
Add basic crypto_info module ( #363 )
...
* Add basic crypto_info module.
* Improve check.
* Actually test capabilities.
* Also output EC curve list.
* Fix detections.
* Ed25519 and Ed448 are not supported on FreeBSD 12.1.
* Refactor.
* Also retrieve information on the OpenSSL binary.
* Improve splitting.
* Update plugins/modules/crypto_info.py
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
* Replace list by tuple.
Co-authored-by: Andrew Pantuso <ajpantuso@gmail.com>
2022-01-05 18:19:42 +01:00
3e307fe062
Fix typo. ( #367 )
2022-01-05 18:16:27 +01:00
6ee238d961
certificate_complete_chain: avoid infinite loops, and double roots when root certificate was already part of chain ( #360 )
...
* Avoid infinite loops, and double roots when root certificate was already part of chain.
* Refactor tests for readability.
2022-01-04 07:00:09 +01:00
Felix Fontein
Yauhen
bluikko
Andrew Pantuso
JochenKorge