majic-ansible-roles Files · testsite/tls/gnutls_server

Files @ a5d38f30094b

Branch filter:

Location: majic-ansible-roles/testsite/tls/gnutls_server_certificate.cfg.j2

a5d38f30094b 926 B text/plain Show Annotation Show as Raw Download as Raw

branko

MAR-132: Workarounds for wsgi_website Python virtual environment in Debian Stretch:

- Manually install setuptools in Python virtual environment on Debian
Stretch, otherwise the pkg-resources==0.0.0 package will mess with
pip freeze etc.
- Add back installation of futures package, even on Python 3 (since it
does not cause any harm).
- A small cleanup of how requirements are treated will be done in
separate ticket.

# X.509 Certificate options
#
# DN options

# The organization of the subject.
organization = "Example Inc."

# The country of the subject. Two letter code.
country = SE

# The common name of the certificate owner.
cn = "Exampe Inc. {{ item.name }} Server"

# In how many days, counting from today, this certificate will expire.
expiration_days = 365

# X.509 v3 extensions

# A dnsname in case of a WWW server.
dns_name = "{{ item.hostname }}.{{ testsite_domain }}"
{% for dns_name in item.extra_dns_names | default([]) %}
dns_name = "{{ dns_name }}"
{% endfor %}

# Whether this certificate will be used for a TLS server
tls_www_server

# Whether this certificate will be used to sign data (needed
# in TLS DHE ciphersuites).
signing_key

# Whether this certificate will be used to encrypt data (needed
# in TLS RSA ciphersuites). Note that it is preferred to use different
# keys for encryption and signing.
encryption_key