Self Sign certificate – Generate and OpenSSL certificates based on existing Root ca

Adir

unread,

Sep 12, 2021, 4:58:29 AM9/12/21

to Ansible Project

Hi,

I need to generate self sign certificate based on existing Root CA.
How can i do this?
i noticed below module -> x509_certificate – Generate and/or check OpenSSL certificates
But i didn't understand how can i generate ssl certificate based on existing root cert ??

Thanks !!

Dick Visser

unread,

Sep 12, 2021, 6:16:15 AM9/12/21

to ansible...@googlegroups.com

On Sun, 12 Sep 2021 at 10:58, 'Adir' via Ansible Project <ansible...@googlegroups.com> wrote:

Hi,
I need to generate self sign certificate based on existing Root CA.

This doesn't make sense.

It's either a self signed certificate, or a certificate that is signed by a CA.

So, what do you mean?

How can i do this?
i noticed below module -> x509_certificate – Generate and/or check OpenSSL certificates
But i didn't understand how can i generate ssl certificate based on existing root cert ??

Thanks !!

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/421b0fe0-e945-4aad-88e0-4b271c95d809n%40googlegroups.com.

--

Sent from a mobile device - please excuse the brevity, spelling and punctuation.

Adir

unread,

Sep 12, 2021, 7:06:54 AM9/12/21

to Ansible Project

a certificate that is signed by a CA that already exist (including ca.key and ca.crt)...

Dick Visser

unread,

Sep 13, 2021, 8:29:58 AM9/13/21

to ansible...@googlegroups.com

Check the second example at the bottom of
https://docs.ansible.com/ansible/latest/collections/community/crypto/x509_certificate_module.html

On Sun, 12 Sept 2021 at 13:07, 'Adir' via Ansible Project

<ansible...@googlegroups.com> wrote:
>
> a certificate that is signed by a CA that already exist (including ca.key and ca.crt)...
>
> On Sunday, September 12, 2021 at 1:16:15 PM UTC+3 dick....@geant.org wrote:
>>
>> On Sun, 12 Sep 2021 at 10:58, 'Adir' via Ansible Project <ansible...@googlegroups.com> wrote:
>>>
>>> Hi,
>>> I need to generate self sign certificate based on existing Root CA.
>>
>>
>>
>> This doesn't make sense.
>> It's either a self signed certificate, or a certificate that is signed by a CA.
>>
>> So, what do you mean?
>>
>>
>>>
>>> How can i do this?
>>> i noticed below module -> x509_certificate – Generate and/or check OpenSSL certificates
>>> But i didn't understand how can i generate ssl certificate based on existing root cert ??
>>>
>>>
>>> Thanks !!
>>>
>>>
>>> --
>>> You received this message because you are subscribed to the Google Groups "Ansible Project" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
>>> To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/421b0fe0-e945-4aad-88e0-4b271c95d809n%40googlegroups.com.
>>
>> --
>> Sent from a mobile device - please excuse the brevity, spelling and punctuation.
>
> --
> You received this message because you are subscribed to the Google Groups "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.

> To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/5230806a-a673-4b9a-a237-12e3bb9884c5n%40googlegroups.com.

--
Dick Visser
Trust & Identity Service Operations Manager
GÉANT

Reply all

Reply to author

Forward