basicConstraints
|
|
changed
|
|
diff
|
--- before
+++ after
@@ -1 +1,85 @@
-{}
+{
+ "authority_cert_issuer": null,
+ "authority_cert_serial_number": null,
+ "authority_key_identifier": null,
+ "basic_constraints": [
+ "CA:TRUE"
+ ],
+ "basic_constraints_critical": true,
+ "can_parse_csr": true,
+ "extended_key_usage": null,
+ "extended_key_usage_critical": false,
+ "extensions_by_oid": {
+ "2.5.29.14": {
+ "critical": false,
+ "value": "BBTK/LzZIMjgvxMEHkAjU9VZL9Uraw=="
+ },
+ "2.5.29.17": {
+ "critical": false,
+ "value": "MFCCB3NlcnZpY2WCIXNlcnZpY2Uua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbIIicmVnaXN0cnkua2lkY2x1c3Rlci5rdWJlaW5pdC5sb2NhbA=="
+ },
+ "2.5.29.19": {
+ "critical": true,
+ "value": "MAMBAf8="
+ }
+ },
+ "key_usage": null,
+ "key_usage_critical": false,
+ "name_constraints_critical": false,
+ "name_constraints_excluded": null,
+ "name_constraints_permitted": null,
+ "ocsp_must_staple": null,
+ "ocsp_must_staple_critical": false,
+ "public_key": "-----BEGIN PUBLIC KEY-----\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyYeOvvGLcz3Rwe1AVGLv\no0MQlU51NuC9GMcXg+Ky9K55qHrG3Uz4RssoW/GXSPcqzbmacomUMpB3hK6ba9vA\nP20tGQPvMPo6Hit4vdBz1vbVNMsrecQVK/tGOvqGLVy0kbXTjGGxIENxBcbdbDIh\ni9U/gNpIer+KDP8jZmTk2YQsGpgdfQVYIQC8eOjbGoGWRZ/YFICmwCJo46WqIDGh\nRGniXf+oWW8dO1RoagGD1I4zbbEIeFJSgpMu/f97tjF1h4zxl7zY8Sc9YfFTJK5Q\nvR9M3RcybMUIfepCrX+NMIeLGPrDRuXQzMuPG48nRoYuSc23mePyPlK+NHcDiMyg\nrVkJOnN8dTwm0iw3sTsGCd1nfhnysfQB8YkYGJyz5pP8G0Tg9bRpQTCH7rGNRynT\n8B8/so7nd5BlafbS9WbV7bw92UgNIXDma0SCeIClNtENgu8XDZZ2/Qa3ZaU9nCZ/\nVlcPdc5Oh9j6O5Uu2LMGXxFn3nbUarNQXLdkpzLV8Wmriku/QQAROctIsxHVOSfG\nsOWClu69QvStVUb0RGGql1gxSPR/sLKefMMRGtgEEZhN8CIJrO1ys7OIh63pjC23\nnqajJkUWSsusx9RYQ7MAgJ1QSlXZpYX/lk+myyctvbJJ2EnkS4TlkEbeywdEotVE\nNoLGX+9y2YQmsyr36JGCoRUCAwEAAQ==\n-----END PUBLIC KEY-----\n",
+ "public_key_data": {
+ "exponent": 65537,
+ "modulus": 822168718465281742585944358686004265476168997838511275694311051134089068899898294931663699438512952312933305304984527439247938295075289741642431368624159232573637148882755629850781163667741904344442050579995871025477192818875748009597529314958656345560493914066319532485832448403545670161177403389669940886925252630155772873935406635862983686587973576536517339729692862830420125917274710726270405582318602455864094172640300096073130939299565432654798025516287296979252405399706209671477914688066970119161113736976571244654976714291006029963606638358634024960580928837549104156322143088020203356295163919403695006502587643288243450637030729970893842546358849363702425729643138416657446829948785385617308664062903632024672208302855150372876438746378580798230653629986619251271536991888316071539899111700605232678148306714307399547683849625113212834219197419321562901874252454779318785052984538774288310524123259840112697888734803308481565668034156392062927588037768725050049994226021712762928044339083882749163294009755987645426389280180423659070595803318776580476057365017574624678387474870966746811096071950458104704354058020647894511221722830113250461392823818835168566574233197584018725089368369384602097363272110470800469750096149,
+ "size": 4096
+ },
+ "public_key_fingerprints": {
+ "sha256": "0d:7e:7a:0d:6a:af:4d:54:62:fa:93:78:59:48:da:7f:8f:e7:4e:7a:44:84:ee:0b:4d:da:68:49:19:08:3d:11"
+ },
+ "public_key_type": "RSA",
+ "signature_valid": true,
+ "subject": {
+ "commonName": "service.kidcluster.kubeinit.local",
+ "countryName": "US",
+ "localityName": "MyCity",
+ "organizationName": "MyCompany",
+ "organizationalUnitName": "MyDepartment",
+ "stateOrProvinceName": "MyState"
+ },
+ "subject_alt_name": [
+ "DNS:service",
+ "DNS:service.kidcluster.kubeinit.local",
+ "DNS:registry.kidcluster.kubeinit.local"
+ ],
+ "subject_alt_name_critical": false,
+ "subject_key_identifier": "ca:fc:bc:d9:20:c8:e0:bf:13:04:1e:40:23:53:d5:59:2f:d5:2b:6b",
+ "subject_ordered": [
+ [
+ "countryName",
+ "US"
+ ],
+ [
+ "stateOrProvinceName",
+ "MyState"
+ ],
+ [
+ "localityName",
+ "MyCity"
+ ],
+ [
+ "organizationName",
+ "MyCompany"
+ ],
+ [
+ "organizationalUnitName",
+ "MyDepartment"
+ ],
+ [
+ "commonName",
+ "service.kidcluster.kubeinit.local"
+ ]
+ ]
+}
|
extendedKeyUsage
|
None
|
filename
|
/var/kubeinit/registry/certs/domain.csr
|
invocation
|
{
"module_args": {
"attributes": null,
"authority_cert_issuer": null,
"authority_cert_serial_number": null,
"authority_key_identifier": null,
"backup": false,
"basic_constraints": [
"CA:TRUE"
],
"basic_constraints_critical": true,
"common_name": "service.kidcluster.kubeinit.local",
"country_name": "US",
"create_subject_key_identifier": true,
"crl_distribution_points": null,
"digest": "sha256",
"email_address": null,
"extended_key_usage": null,
"extended_key_usage_critical": false,
"force": false,
"group": null,
"key_usage": null,
"key_usage_critical": false,
"locality_name": "MyCity",
"mode": null,
"name_constraints_critical": false,
"name_constraints_excluded": null,
"name_constraints_permitted": null,
"ocsp_must_staple": false,
"ocsp_must_staple_critical": false,
"organization_name": "MyCompany",
"organizational_unit_name": "MyDepartment",
"owner": null,
"path": "/var/kubeinit/registry/certs/domain.csr",
"privatekey_content": null,
"privatekey_passphrase": null,
"privatekey_path": "/var/kubeinit/registry/certs/domain.key",
"return_content": false,
"select_crypto_backend": "auto",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "present",
"state_or_province_name": "MyState",
"subject": null,
"subject_alt_name": [
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
],
"subject_alt_name_critical": false,
"subject_key_identifier": null,
"subject_ordered": null,
"unsafe_writes": false,
"use_common_name_for_san": true,
"version": 1
}
}
|
keyUsage
|
None
|
name_constraints_excluded
|
|
name_constraints_permitted
|
|
ocspMustStaple
|
|
privatekey
|
/var/kubeinit/registry/certs/domain.key
|
subject
|
[
[
"C",
"US"
],
[
"ST",
"MyState"
],
[
"L",
"MyCity"
],
[
"O",
"MyCompany"
],
[
"OU",
"MyDepartment"
],
[
"CN",
"service.kidcluster.kubeinit.local"
]
]
|
subjectAltName
|
[
"DNS:service",
"DNS:service.kidcluster.kubeinit.local",
"DNS:registry.kidcluster.kubeinit.local"
]
|