majic-ansible-roles Files · testsite/tls/ca.cfg

Files @ 814be5def61d

Branch filter:

Location: majic-ansible-roles/testsite/tls/ca.cfg

814be5def61d 555 B text/x-ini Show Annotation Show as Raw Download as Raw

branko

MAR-189: Added support for Debian 11 Bullseye to xmpp_server role:

- Roll-out LDAP client configuration since Bullseye does not come with
a stock one at /etc/ldap/ldap.conf that sets the trust anchor
correctly for validating LDAP server certificates.
- Drop the backports pinning in case of Bullseye (for now let's try to
keep the Buster and Bullseye at same versions for simplicity).
- Drop installation of Python apt bindings (no longer used).
- Tests for Buster and Bullseye need to be split-up a bit due to some
differences around backports etc.

# X.509 Certificate options
#
# DN options

# The organization of the subject.
organization = "Example Inc."

# The country of the subject. Two letter code.
country = "SE"

# The common name of the certificate owner.
cn = "Example Inc. Test Site CA"

# In how many days, counting from today, this certificate will expire.
expiration_days = 1825

# X.509 v3 extensions

# Whether this is a CA certificate or not
ca

# Whether this key will be used to sign other certificates.
cert_signing_key

# Whether this key will be used to sign CRLs.
crl_signing_key