ansible

Commit Graph

Author	SHA1	Message	Date
Felix Fontein	5d5a7d6ebe	openssl_privatekey: forgot to add secp256r1 (#58605 ) * Forgot to add secp256r1. This one is the interoperable one. * Add changelog.	5 years ago
Felix Fontein	221da3e8b1	Implement Ed25519, Ed448, X25519 and X448 support (cryptography backend). (#54947 )	6 years ago
Felix Fontein	90c067e947	openssl_* modules: private key errors (#54088 ) * Improve error handling, in particular with respect to private key loading problems. * Add tests to validate that modules regenerate invalid input and don't crash. * Don't crash when input is invalid. * Create 'better' broken input. * Fix paths. * Simplifying pyOpenSSL error handling.	6 years ago
Felix Fontein	d7a273273a	openssl_: proper mode support (#54085 ) Add write helper. * Adjust modules (except openssl_certificate). * Adding tests for mode (with openssl_privatekey). * Add openssl_certificate support. * Never, ever remove the output file before actually trying to generate new content for it. Removal is only allowed when state=absent, or when the object has been regenerated and the result needs to be written to that place. * Add changelog. * Extend test.	6 years ago
Felix Fontein	e00f315358	openssl_privatekey: add backup option (#53593 ) * Add backup option to openssl_privatekey. * Add changelog fragment. * Make module available in remove(). * Add tests for backup. * Update lib/ansible/modules/crypto/openssl_privatekey.py Co-Authored-By: felixfontein <felix@fontein.de> * Update lib/ansible/modules/crypto/openssl_privatekey.py Co-Authored-By: felixfontein <felix@fontein.de> * Update lib/ansible/modules/crypto/openssl_privatekey.py Co-Authored-By: felixfontein <felix@fontein.de> * Update lib/ansible/modules/crypto/openssl_privatekey.py	6 years ago
Felix Fontein	caf7fd2245	openssl_: improve passphrase handling for private keys in PyOpenSSL (#53489 ) Raise OpenSSLBadPassphraseError if passphrase is wrong. * Improve handling of passphrase errors. Current behavior for modules is: if passphrase is wrong (or wrongly specified), fail. Current behavior for openssl_privatekey is: if passphrase is worng (or wrongly specified), regenerate. * Add changelog. * Add tests. * Adjustments for some versions of PyOpenSSL. * Update lib/ansible/modules/crypto/openssl_certificate.py Improve text. Co-Authored-By: felixfontein <felix@fontein.de>	6 years ago
Felix Fontein	345011e024	openssl_csr cryptography backend, try II (#50894 ) * Revert "Revert "openssl_csr: Allow to use cryptography as backend (#50324)"" This reverts commit `bbd2e31e9f`. * Remove more complicated selection copy'n'pasted from openssl_privatekey. * Add tests for backend selection. * Add openssl_csr test for arbitrary string commonName. * Allow to disable commonName -> SAN copying (fixes #36690).	6 years ago
Felix Fontein	92ef500185	openssl_privatekey: add ECC support (#49416 ) * Add cryptography backend for openssl_privatekey. * Adding ECC support. No support for X25519 and X449, since they don't support serialization. * Improve finterprint calculation to work with Python 3. * Add fingerprint check. * Fix typo. * Use separate curve option for elliptic curves, and use type 'ECC'. * Using curve names as defined in IANA registry. * Bump minimal supported cryptography version. Older versions might work as well, but I couldn't test them. * Improve documentation.	6 years ago
Yanis Guenane	d4e7b045b7	Extend test coverage for openssl modules (#27548 ) * openssl_privatekey: Extend test coverage Extend the coverage of the integration test for the module openssl_privatekey. New tests have been added: * passphrase * idempotence * removal Co-Authored-By: Pierre-Louis Bonicoli <pierre-louis.bonicoli@gmx.fr> * openssl_publickey: Extend test coverage Extend the coverage on the integration test for the module openssl_publickey. New tests have been added: * OpenSSH format * passphrase * idempotence * removal	7 years ago
Yanis Guenane	8b22c45a45	Enable integration tests for the crypto/ namespace (#26684 ) Crypto namespace contains the openssl modules. It has no integration testing as of now. This commits aims to add integration tests for the crypto namespace. This will make it easier to spot breaking changes in the future. This tests currently apply to: * openssl_privatekey * openssl_publickey * openssl_csr	7 years ago

10 Commits (6a77533b57595a6624e47524b4d8e653be5cee68)