WIP

ansible/roles/local_ca/defaults/main.yml

@@ -3,9 +3,9 @@ local_ca_key_size: 4096
 local_ca_key_type: "RSA"
 
 # Required
-local_ca_common_name: None
-local_ca_passphrase: None
-local_ca_country_name: None
-local_ca_locality_name: None
-local_ca_organization_name: None
-local_ca_email_address: None
+local_ca_common_name: null
+local_ca_passphrase: null
+local_ca_country_name: null
+local_ca_locality_name: null
+local_ca_organization_name: null
+local_ca_email_address: null

ansible/roles/local_ca/tasks/main.yml

@@ -22,7 +22,7 @@
   community.crypto.openssl_csr:
     path: "ca/ca-certificate.csr"
     privatekey_path: "ca/ca-certificate.key"
-    privatekey_passphrase: "{{ vault.ca.passphrase }}"
+    privatekey_passphrase: "{{ local_ca_passphrase }}"
     common_name: "{{ local_ca_common_name }}"
     use_common_name_for_san: false  # since we do not specify SANs, don't use CN as a SAN
     country_name: "{{ local_ca_country_name }}"
@@ -47,5 +47,5 @@
     path: "ca/ca-certificate.crt"
     csr_content: "{{ local_ca_csr.csr }}"
     privatekey_path: "ca/ca-certificate.key"
-    privatekey_passphrase: "{{ vault.ca.passphrase }}"
+    privatekey_passphrase: "{{ local_ca_passphrase }}"
     provider: "selfsigned"