basicConstraints
|
|
changed
|
|
diff
|
--- before
+++ after
@@ -1 +1,85 @@
-{}
+{
+ "authority_cert_issuer": null,
+ "authority_cert_serial_number": null,
+ "authority_key_identifier": null,
+ "basic_constraints": [
+ "CA:TRUE"
+ ],
+ "basic_constraints_critical": true,
+ "can_parse_csr": true,
+ "extended_key_usage": null,
+ "extended_key_usage_critical": false,
+ "extensions_by_oid": {
+ "2.5.29.14": {
+ "critical": false,
+ "value": "BBQSejomufn7O0vTXkPnkT4xvwvOwQ=="
+ },
+ "2.5.29.17": {
+ "critical": false,
+ "value": "MFCCB3NlcnZpY2WCIXNlcnZpY2UucmtlY2x1c3Rlci5rdWJlaW5pdC5sb2NhbIIicmVnaXN0cnkucmtlY2x1c3Rlci5rdWJlaW5pdC5sb2NhbA=="
+ },
+ "2.5.29.19": {
+ "critical": true,
+ "value": "MAMBAf8="
+ }
+ },
+ "key_usage": null,
+ "key_usage_critical": false,
+ "name_constraints_critical": false,
+ "name_constraints_excluded": null,
+ "name_constraints_permitted": null,
+ "ocsp_must_staple": null,
+ "ocsp_must_staple_critical": false,
+ "public_key": "-----BEGIN PUBLIC KEY-----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\n1T0H4vb0XprgzjKnQQUre00CAwEAAQ==\n-----END PUBLIC KEY-----\n",
+ "public_key_data": {
+ "exponent": 65537,
+ "modulus": 789243718697124018590952465428737540262369884033165789091541729210780240579630406205903558658708397717410725026329925981471640935015496745455297246685425131844157708374386791839528017722131907236654264182659219431942982320576834477494460513317615459188205622791795683557479228201583927646339487347746593738023851051244179062299777633694229281061034992725465865258046731936587237351861000779577753149752175678721432974030573338692346707698049871175716274333758359176849180607919690029369128843483967722566347738498233557589307776057591783593423047194173200894180756236862839691152993572866434409855716188834966756251101825193932185985067245719555601547940503998620375375755873891181048989530564304331349105118140775375067538122245780371162503984419198077068875792500617597433102371625471888137519427374048267783394659446519523643121608256394440545345931196112913537409130131830838454983713004842411206817358790234686789843836302014194896379454172865517139652883364131656682405002323704049170892965463727131031274514667675631313273594544273033558807645455682500644692101432877679891505803799175975827586347275121600293772143265652441283446201043960558567099214060114128017528907884614535624861941284515148118174292996486188882574670669,
+ "size": 4096
+ },
+ "public_key_fingerprints": {
+ "sha256": "8a:30:c0:0e:bc:f1:7d:ff:6d:2f:7e:e6:3f:8a:d6:83:e8:1f:0c:75:5b:37:21:ce:c5:15:c4:3c:ef:d3:60:29"
+ },
+ "public_key_type": "RSA",
+ "signature_valid": true,
+ "subject": {
+ "commonName": "service.rkecluster.kubeinit.local",
+ "countryName": "US",
+ "localityName": "MyCity",
+ "organizationName": "MyCompany",
+ "organizationalUnitName": "MyDepartment",
+ "stateOrProvinceName": "MyState"
+ },
+ "subject_alt_name": [
+ "DNS:service",
+ "DNS:service.rkecluster.kubeinit.local",
+ "DNS:registry.rkecluster.kubeinit.local"
+ ],
+ "subject_alt_name_critical": false,
+ "subject_key_identifier": "12:7a:3a:26:b9:f9:fb:3b:4b:d3:5e:43:e7:91:3e:31:bf:0b:ce:c1",
+ "subject_ordered": [
+ [
+ "countryName",
+ "US"
+ ],
+ [
+ "stateOrProvinceName",
+ "MyState"
+ ],
+ [
+ "localityName",
+ "MyCity"
+ ],
+ [
+ "organizationName",
+ "MyCompany"
+ ],
+ [
+ "organizationalUnitName",
+ "MyDepartment"
+ ],
+ [
+ "commonName",
+ "service.rkecluster.kubeinit.local"
+ ]
+ ]
+}
|
extendedKeyUsage
|
None
|
filename
|
/var/kubeinit/registry/certs/domain.csr
|
invocation
|
{
"module_args": {
"attributes": null,
"authority_cert_issuer": null,
"authority_cert_serial_number": null,
"authority_key_identifier": null,
"backup": false,
"basic_constraints": [
"CA:TRUE"
],
"basic_constraints_critical": true,
"common_name": "service.rkecluster.kubeinit.local",
"country_name": "US",
"create_subject_key_identifier": true,
"crl_distribution_points": null,
"digest": "sha256",
"email_address": null,
"extended_key_usage": null,
"extended_key_usage_critical": false,
"force": false,
"group": null,
"key_usage": null,
"key_usage_critical": false,
"locality_name": "MyCity",
"mode": null,
"name_constraints_critical": false,
"name_constraints_excluded": null,
"name_constraints_permitted": null,
"ocsp_must_staple": false,
"ocsp_must_staple_critical": false,
"organization_name": "MyCompany",
"organizational_unit_name": "MyDepartment",
"owner": null,
"path": "/var/kubeinit/registry/certs/domain.csr",
"privatekey_content": null,
"privatekey_passphrase": null,
"privatekey_path": "/var/kubeinit/registry/certs/domain.key",
"return_content": false,
"select_crypto_backend": "auto",
"selevel": null,
"serole": null,
"setype": null,
"seuser": null,
"state": "present",
"state_or_province_name": "MyState",
"subject": null,
"subject_alt_name": [
"DNS:service",
"DNS:service.rkecluster.kubeinit.local",
"DNS:registry.rkecluster.kubeinit.local"
],
"subject_alt_name_critical": false,
"subject_key_identifier": null,
"subject_ordered": null,
"unsafe_writes": false,
"use_common_name_for_san": true,
"version": 1
}
}
|
keyUsage
|
None
|
name_constraints_excluded
|
|
name_constraints_permitted
|
|
ocspMustStaple
|
|
privatekey
|
/var/kubeinit/registry/certs/domain.key
|
subject
|
[
[
"C",
"US"
],
[
"ST",
"MyState"
],
[
"L",
"MyCity"
],
[
"O",
"MyCompany"
],
[
"OU",
"MyDepartment"
],
[
"CN",
"service.rkecluster.kubeinit.local"
]
]
|
subjectAltName
|
[
"DNS:service",
"DNS:service.rkecluster.kubeinit.local",
"DNS:registry.rkecluster.kubeinit.local"
]
|