Community.Crypto Release Notes๏
+Community.Crypto Release Notes๏
-v2.20.0๏
+v2.23.0๏
Release Summary๏
+Release Summary๏
+Feature release.
+Minor Changes๏
+-
+
acme_certificate - add compatibility for ACME CAs that are not fully RFC8555 compliant and do not provide
challengesin authz objects (https://github.com/ansible-collections/community.crypto/issues/824, https://github.com/ansible-collections/community.crypto/pull/832).
+luks_device - allow to provide passphrases base64-encoded (https://github.com/ansible-collections/community.crypto/issues/827, https://github.com/ansible-collections/community.crypto/pull/829).
+x509_certificate_convert - add new option
verify_cert_parsablewhich allows to check whether the certificate can actually be parsed (https://github.com/ansible-collections/community.crypto/issues/809, https://github.com/ansible-collections/community.crypto/pull/830).
+
Deprecated Features๏
+-
+
openssl_pkcs12 - the PyOpenSSL based backend is deprecated and will be removed from community.crypto 3.0.0. From that point on you need cryptography 3.0 or newer to use this module (https://github.com/ansible-collections/community.crypto/issues/667, https://github.com/ansible-collections/community.crypto/pull/831).
+
v2.22.3๏
+Release Summary๏
+Bugfix release.
+Bugfixes๏
+-
+
acme_* modules - when using the OpenSSL backend, explicitly use the UTC timezone in Python code (https://github.com/ansible-collections/community.crypto/pull/811).
+time module utils - fix conversion of naive
datetimeobjects to UNIX timestamps for Python 3 (https://github.com/ansible-collections/community.crypto/issues/808, https://github.com/ansible-collections/community.crypto/pull/810).
+
v2.22.2๏
+Release Summary๏
+Bugfix release.
+Bugfixes๏
+-
+
acme_certificate - fix authorization failure when CSR contains SANs with mixed case (https://github.com/ansible-collections/community.crypto/pull/803).
+
v2.22.1๏
+Release Summary๏
+Bugfix release.
+Bugfixes๏
+-
+
acme_* modules - when querying renewal information, make sure to insert a slash between the base URL and the certificate identifier (https://github.com/ansible-collections/community.crypto/issues/801, https://github.com/ansible-collections/community.crypto/pull/802).
+various modules - pass absolute paths to
module.atomic_move()(https://github.com/ansible/ansible/issues/83950, https://github.com/ansible-collections/community.crypto/pull/799).
+
v2.22.0๏
+Release Summary๏
+Feature release.
+Minor Changes๏
+-
+
openssl_privatekey, openssl_privatekey_pipe - add default value
autoforcipheroption, which happens to be the only supported value for this option anyway. Therefore it is no longer necessary to specifycipher=autowhen providingpassphrase(https://github.com/ansible-collections/community.crypto/issues/793, https://github.com/ansible-collections/community.crypto/pull/794).
+
v2.21.1๏
+Release Summary๏
+Maintenance release.
+Bugfixes๏
+-
+
When using cryptography >= 43.0.0, use offset-aware
datetime.datetimeobjects (with timezone UTC) instead of offset-naive UTC timestamps for theInvalidityDateX.509 CRL extension (https://github.com/ansible-collections/community.crypto/issues/726, https://github.com/ansible-collections/community.crypto/pull/730).
+
v2.21.0๏
+Release Summary๏
+Feature release.
+Minor Changes๏
+-
+
certificate_complete_chain - add ability to identify Ed25519 and Ed448 complete chains (https://github.com/ansible-collections/community.crypto/pull/777).
+get_certificate - adds
tls_ctx_optionsoption for specifying SSL CTX options (https://github.com/ansible-collections/community.crypto/pull/779).
+get_certificate - allow to obtain the certificate chain sent by the server, and the one used for validation, with the new
get_certificate_chainoption. Note that this option only works if the module is run with Python 3.10 or newer (https://github.com/ansible-collections/community.crypto/issues/568, https://github.com/ansible-collections/community.crypto/pull/784).
+
v2.20.0๏
+Release Summary๏
Feature and bugfix release.
The deprecations in this release are only relevant for collections that use shared code or docs fragments from this collection.
Minor Changes๏
+Minor Changes๏
acme_certificate - add
include_renewal_cert_idoption to allow requesting renewal of a specific certificate according to the current ACME Renewal Information specification draft (https://github.com/ansible-collections/community.crypto/pull/739).
Deprecated Features๏
+Deprecated Features๏
acme documentation fragment - the default
community.crypto.acme[.documentation]docs fragment is deprecated and will be removed from community.crypto 3.0.0. Replace it with both the newcommunity.crypto.acme.basicandcommunity.crypto.acme.accountfragments (https://github.com/ansible-collections/community.crypto/pull/735).acme.backends module utils - the
get_cert_information()method for a ACME crypto backend must be implemented from community.crypto 3.0.0 on (https://github.com/ansible-collections/community.crypto/pull/736).crypto.module_backends.common module utils - the
crypto.module_backends.commonmodule utils is deprecated and will be removed from community.crypto 3.0.0. Use the improvedargspecmodule util instead (https://github.com/ansible-collections/community.crypto/pull/749).
Bugfixes๏
+Bugfixes๏
x509_crl, x509_certificate, x509_certificate_info - when parsing absolute timestamps which omitted the second count, the first digit of the minutes was used as a one-digit minutes count, and the second digit of the minutes as a one-digit second count (https://github.com/ansible-collections/community.crypto/pull/745).
New Modules๏
+New Modules๏
community.crypto.acme_ari_info - Retrieves ACME Renewal Information (ARI) for a certificate.
community.crypto.acme_certificate_deactivate_authz - Deactivate all authz for an ACME v2 order.
@@ -971,13 +1151,13 @@ code or docs fragments from this collection.
v2.19.1๏
-Release Summary๏
+v2.19.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
crypto.math module utils - change return values for
quick_is_not_prime()andconvert_int_to_bytes(0, 0)for special cases that do not appear when using the collection (https://github.com/ansible-collections/community.crypto/pull/733).ecs_certificate - fixed
csroption to be empty and allow renewal of a specific certificate according to the Renewal Information specification (https://github.com/ansible-collections/community.crypto/pull/740).
@@ -986,57 +1166,57 @@ code or docs fragments from this collection.
v2.19.0๏
-Release Summary๏
+v2.19.0๏
+Release Summary๏
Bugfix and feature release.
Minor Changes๏
+Minor Changes๏
When using cryptography >= 42.0.0, use offset-aware
datetime.datetimeobjects (with timezone UTC) instead of offset-naive UTC timestamps (https://github.com/ansible-collections/community.crypto/issues/726, https://github.com/ansible-collections/community.crypto/pull/727).openssh_cert - avoid UTC functions deprecated in Python 3.12 when using Python 3 (https://github.com/ansible-collections/community.crypto/pull/727).
Deprecated Features๏
+Deprecated Features๏
acme.backends module utils - from community.crypto on, all implementations of
CryptoBackendmust overrideget_ordered_csr_identifiers(). The current default implementation, which simply sorts the result ofget_csr_identifiers(), will then be removed (https://github.com/ansible-collections/community.crypto/pull/725).
Bugfixes๏
+Bugfixes๏
acme_certificate - respect the order of the CNAME and SAN identifiers that are passed on when creating an ACME order (https://github.com/ansible-collections/community.crypto/issues/723, https://github.com/ansible-collections/community.crypto/pull/725).
New Modules๏
+New Modules๏
community.crypto.x509_certificate_convert - Convert X.509 certificates
v2.18.0๏
-Release Summary๏
+v2.18.0๏
+Release Summary๏
Bugfix and feature release.
Minor Changes๏
+Minor Changes๏
x509_crl - the new option
serial_numbersallow to configure in which format serial numbers can be provided torevoked_certificates[].serial_number. The default is as integers (serial_numbers=integer) for backwards compatibility; settingserial_numbers=hex-octetsallows to specify colon-separated hex octet strings like00:11:22:FF(https://github.com/ansible-collections/community.crypto/issues/687, https://github.com/ansible-collections/community.crypto/pull/715).
Deprecated Features๏
+Deprecated Features๏
openssl_csr_pipe, openssl_privatekey_pipe, x509_certificate_pipe - the current behavior of check mode is deprecated and will change in community.crypto 3.0.0. The current behavior is similar to the modules without
_pipe: if the object needs to be (re-)generated, only thechangedstatus is set, but the object is not updated. From community.crypto 3.0.0 on, the modules will ignore check mode and always act as if check mode is not active. This behavior can already achieved now by addingcheck_mode: falseto the task. If you think this breaks your use-case of this module, please create an issue in the community.crypto repository (https://github.com/ansible-collections/community.crypto/issues/712, https://github.com/ansible-collections/community.crypto/pull/714).
Bugfixes๏
+Bugfixes๏
luks_device - fixed module a bug that prevented using
remove_keyslotwith the value0(https://github.com/ansible-collections/community.crypto/pull/710).luks_device - fixed module falsely outputting
changed=falsewhen trying to add a new slot with a key that is already present in another slot. The module now rejects adding keys that are already present in another slot (https://github.com/ansible-collections/community.crypto/pull/710).
@@ -1044,9 +1224,9 @@ code or docs fragments from this collection.
New Plugins๏
+New Plugins๏
Filter๏
+Filter๏
community.crypto.parse_serial - Convert a serial number as a colon-separated list of hex numbers to an integer
community.crypto.to_serial - Convert an integer to a colon-separated list of hex numbers
@@ -1055,13 +1235,13 @@ code or docs fragments from this collection.
v2.17.1๏
-Release Summary๏
+v2.17.1๏
+Release Summary๏
Bugfix release for compatibility with cryptography 42.0.0.
Bugfixes๏
+Bugfixes๏
openssl_dhparam - was using an internal function instead of the public API to load DH param files when using the
cryptographybackend. The internal function was removed in cryptography 42.0.0. The module now uses the public API, which has been available since support for DH params was added to cryptography (https://github.com/ansible-collections/community.crypto/pull/698).openssl_privatekey_info -
check_consistency=trueno longer works for RSA keys with cryptography 42.0.0+ (https://github.com/ansible-collections/community.crypto/pull/701).
@@ -1070,26 +1250,26 @@ code or docs fragments from this collection.
v2.17.0๏
-Release Summary๏
+v2.17.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
luks_device - add allow discards option (https://github.com/ansible-collections/community.crypto/pull/693).
v2.16.2๏
-Release Summary๏
+v2.16.2๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
acme_* modules - directly react on bad return data for account creation/retrieval/updating requests (https://github.com/ansible-collections/community.crypto/pull/682).
acme_* modules - fix improved error reporting in case of socket errors, bad status lines, and unknown connection errors (https://github.com/ansible-collections/community.crypto/pull/684).
@@ -1099,85 +1279,85 @@ code or docs fragments from this collection.
v2.16.1๏
-Release Summary๏
+v2.16.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
acme_* modules - also retry requests in case of socket errors, bad status lines, and unknown connection errors; improve error messages in these cases (https://github.com/ansible-collections/community.crypto/issues/680).
v2.16.0๏
-Release Summary๏
+v2.16.0๏
+Release Summary๏
Bugfix release.
Minor Changes๏
+Minor Changes๏
luks_devices - add new options
keyslot,new_keyslot, andremove_keyslotto allow adding/removing keys to/from specific keyslots (https://github.com/ansible-collections/community.crypto/pull/664).
Bugfixes๏
+Bugfixes๏
openssl_pkcs12 - modify autodetect to not detect pyOpenSSL >= 23.3.0, which removed PKCS#12 support (https://github.com/ansible-collections/community.crypto/pull/666).
v2.15.1๏
-Release Summary๏
+v2.15.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
acme_* modules - correctly handle error documents without
type(https://github.com/ansible-collections/community.crypto/issues/651, https://github.com/ansible-collections/community.crypto/pull/652).
v2.15.0๏
-Release Summary๏
+v2.15.0๏
+Release Summary๏
Bugfix and feature release.
Minor Changes๏
+Minor Changes๏
openssh_keypair - fail when comment cannot be updated (https://github.com/ansible-collections/community.crypto/pull/646).
Deprecated Features๏
+Deprecated Features๏
get_certificate - the default
falseof theasn1_base64option is deprecated and will change totruein community.crypto 3.0.0 (https://github.com/ansible-collections/community.crypto/pull/600).
Bugfixes๏
+Bugfixes๏
openssh_cert, openssh_keypair - the modules ignored return codes of
sshandssh-keygenin some cases (https://github.com/ansible-collections/community.crypto/issues/645, https://github.com/ansible-collections/community.crypto/pull/646).openssh_keypair - fix comment updating for OpenSSH before 6.5 (https://github.com/ansible-collections/community.crypto/pull/646).
New Plugins๏
-Filter๏
+New Plugins๏
+Filter๏
community.crypto.gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key
Lookup๏
+Lookup๏
community.crypto.gpg_fingerprint - Retrieve a GPG fingerprint from a GPG public or private key file
v2.14.1๏
-Release Summary๏
+v2.14.1๏
+Release Summary๏
Bugfix and maintenance release with updated documentation.
From this version on, community.crypto is using the new Ansible semantic markup in its documentation. If you look at documentation with the ansible-doc CLI tool @@ -1197,27 +1377,27 @@ ansible-core 2.15 or later to see it as it is intended. Alternatively you can look at the devel docsite for the rendered HTML version of the documentation of the latest release.
Bugfixes๏
+Bugfixes๏
Fix PEM detection/identification to also accept random other lines before the line starting with
-----BEGIN(https://github.com/ansible-collections/community.crypto/issues/627, https://github.com/ansible-collections/community.crypto/pull/628).
Known Issues๏
+Known Issues๏
Ansible markup will show up in raw form on ansible-doc text output for ansible-core before 2.15. If you have trouble deciphering the documentation markup, please upgrade to ansible-core 2.15 (or newer), or read the HTML documentation on https://docs.ansible.com/ansible/devel/collections/community/crypto/.
v2.14.0๏
-Release Summary๏
+v2.14.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
acme_certificate - allow to use no challenge by providing
no challengefor thechallengeoption. This is needed for ACME servers where validation is done without challenges (https://github.com/ansible-collections/community.crypto/issues/613, https://github.com/ansible-collections/community.crypto/pull/615).acme_certificate - validate and wait for challenges in parallel instead handling them one after another (https://github.com/ansible-collections/community.crypto/pull/617).
@@ -1226,13 +1406,13 @@ for the rendered HTML version of the documentation of the latest release.
v2.13.1๏
-Release Summary๏
+v2.13.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
execution environment definition - fix installation of
python3-pyOpenSSLpackage on CentOS and RHEL (https://github.com/ansible-collections/community.crypto/pull/606).execution environment definition - fix source of
python3-pyOpenSSLpackage for Rocky Linux 9+ (https://github.com/ansible-collections/community.crypto/pull/606).
@@ -1240,25 +1420,25 @@ for the rendered HTML version of the documentation of the latest release.
v2.13.0๏
-Release Summary๏
+v2.13.0๏
+Release Summary๏
Bugfix and maintenance release.
Minor Changes๏
+Minor Changes๏
x509_crl - the
crl_modeoption has been added to replace the existingmodeoption (https://github.com/ansible-collections/community.crypto/issues/596).
Deprecated Features๏
+Deprecated Features๏
x509_crl - the
modeoption is deprecated; usecrl_modeinstead. Themodeoption will change its meaning in community.crypto 3.0.0, and will refer to the CRL fileโs mode instead (https://github.com/ansible-collections/community.crypto/issues/596).
Bugfixes๏
+Bugfixes๏
openssh_keypair - always generate a new key pair if the private key does not exist. Previously, the module would fail when
regenerate=failwithout an existing key, contradicting the documentation (https://github.com/ansible-collections/community.crypto/pull/598).x509_crl - remove problem with ansible-core 2.16 due to
AnsibleModuleis now validating themodeparameterโs values (https://github.com/ansible-collections/community.crypto/issues/596).
@@ -1266,39 +1446,39 @@ for the rendered HTML version of the documentation of the latest release.
v2.12.0๏
-Release Summary๏
+v2.12.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
get_certificate - add
asn1_base64option to control whether the ASN.1 included in theextensionsreturn value is binary data or Base64 encoded (https://github.com/ansible-collections/community.crypto/pull/592).
v2.11.1๏
-Release Summary๏
+v2.11.1๏
+Release Summary๏
Maintenance release with improved documentation.
v2.11.0๏
-Release Summary๏
+v2.11.0๏
+Release Summary๏
Feature and bugfix release.
Minor Changes๏
+Minor Changes๏
get_certificate - adds
ciphersoption for custom cipher selection (https://github.com/ansible-collections/community.crypto/pull/571).
Bugfixes๏
+Bugfixes๏
action plugin helper - fix handling of deprecations for ansible-core 2.14.2 (https://github.com/ansible-collections/community.crypto/pull/572).
execution environment binary dependencies (bindep.txt) - fix
python3-pyOpenSSLdependency resolution on RHEL 9+ / CentOS Stream 9+ platforms (https://github.com/ansible-collections/community.crypto/pull/575).
@@ -1307,22 +1487,22 @@ for the rendered HTML version of the documentation of the latest release.
v2.10.0๏
-Release Summary๏
+v2.10.0๏
+Release Summary๏
Bugfix and feature release.
Bugfixes๏
+Bugfixes๏
openssl_csr, openssl_csr_pipe - prevent invalid values for
crl_distribution_pointsthat do not have one offull_name,relative_name, andcrl_issuer(https://github.com/ansible-collections/community.crypto/pull/560).openssl_publickey_info - do not crash with internal error when public key cannot be parsed (https://github.com/ansible-collections/community.crypto/pull/551).
New Plugins๏
-Filter๏
+New Plugins๏
+Filter๏
community.crypto.openssl_csr_info - Retrieve information from OpenSSL Certificate Signing Requests (CSR)
community.crypto.openssl_privatekey_info - Retrieve information from OpenSSL private keys
@@ -1335,33 +1515,33 @@ for the rendered HTML version of the documentation of the latest release.
v2.9.0๏
-Release Summary๏
+v2.9.0๏
+Release Summary๏
Regular feature release.
Minor Changes๏
+Minor Changes๏
x509_certificate_info - adds
issuer_urifield in return value based on Authority Information Access data (https://github.com/ansible-collections/community.crypto/pull/530).
v2.8.1๏
-Release Summary๏
+v2.8.1๏
+Release Summary๏
Maintenance release with improved documentation.
v2.8.0๏
-Release Summary๏
+v2.8.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
acme_* modules - handle more gracefully if CAโs new nonce call does not return a nonce (https://github.com/ansible-collections/community.crypto/pull/525).
acme_* modules - include symbolic HTTP status codes in error and log messages when available (https://github.com/ansible-collections/community.crypto/pull/524).
@@ -1370,45 +1550,45 @@ for the rendered HTML version of the documentation of the latest release.
v2.7.1๏
-Release Summary๏
+v2.7.1๏
+Release Summary๏
Maintenance release.
Bugfixes๏
+Bugfixes๏
acme_* modules - improve feedback when importing
cryptographydoes not work (https://github.com/ansible-collections/community.crypto/issues/518, https://github.com/ansible-collections/community.crypto/pull/519).
v2.7.0๏
-Release Summary๏
+v2.7.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
acme* modules - also support the HTTP 503 Service Unavailable and 408 Request Timeout response status for automatic retries (https://github.com/ansible-collections/community.crypto/pull/513).
Bugfixes๏
+Bugfixes๏
openssl_privatekey_pipe - ensure compatibility with newer versions of ansible-core (https://github.com/ansible-collections/community.crypto/pull/515).
v2.6.0๏
-Release Summary๏
+v2.6.0๏
+Release Summary๏
Feature release.
Minor Changes๏
+Minor Changes๏
acme* modules - support the HTTP 429 Too Many Requests response status (https://github.com/ansible-collections/community.crypto/pull/508).
openssh_keypair - added
pkcs1,pkcs8, andsshto the available choices for theprivate_key_formatoption (https://github.com/ansible-collections/community.crypto/pull/511).
@@ -1416,41 +1596,41 @@ for the rendered HTML version of the documentation of the latest release.
v2.5.0๏
-Release Summary๏
+v2.5.0๏
+Release Summary๏
Maintenance release with improved licensing declaration and documentation fixes.
Minor Changes๏
+Minor Changes๏
All software licenses are now in the
LICENSES/directory of the collection root. Moreover,SPDX-License-Identifier:is used to declare the applicable license for every file that is not automatically generated (https://github.com/ansible-collections/community.crypto/pull/491).
v2.4.0๏
-Release Summary๏
+v2.4.0๏
+Release Summary๏
Deprecation and bugfix release. No new features this time.
Deprecated Features๏
+Deprecated Features๏
Support for Ansible 2.9 and ansible-base 2.10 is deprecated, and will be removed in the next major release (community.crypto 3.0.0). Some modules might still work with these versions afterwards, but we will no longer keep compatibility code that was needed to support them (https://github.com/ansible-collections/community.crypto/pull/460).
Bugfixes๏
+Bugfixes๏
openssl_pkcs12 - when using the pyOpenSSL backend, do not crash when trying to read non-existing other certificates (https://github.com/ansible-collections/community.crypto/issues/486, https://github.com/ansible-collections/community.crypto/pull/487).
v2.3.4๏
-Release Summary๏
+v2.3.4๏
+Release Summary๏
Re-release of what was intended to be 2.3.3.
A mistake during the release process caused the 2.3.3 tag to end up on the commit for 1.9.17, which caused the release pipeline to re-publish 1.9.17 @@ -1461,13 +1641,13 @@ has been added.
v2.3.3๏
-Release Summary๏
+v2.3.3๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
Include
Apache-2.0.txtfile forplugins/module_utils/crypto/_obj2txt.pyandplugins/module_utils/crypto/_objects_data.py.openssl_csr - the module no longer crashes with โpermitted_subtrees/excluded_subtrees must be a non-empty list or Noneโ if only one of
name_constraints_permittedandname_constraints_excludedis provided (https://github.com/ansible-collections/community.crypto/issues/481).
@@ -1476,13 +1656,13 @@ has been added.
v2.3.2๏
-Release Summary๏
+v2.3.2๏
+Release Summary๏
Maintenance and bugfix release.
Bugfixes๏
+Bugfixes๏
Include
simplified_bsd.txtlicense file for the ECS module utils.certificate_complete_chain - do not stop execution if an unsupported signature algorithm is encountered; warn instead (https://github.com/ansible-collections/community.crypto/pull/457).
@@ -1490,26 +1670,26 @@ has been added.
v2.3.1๏
-Release Summary๏
+v2.3.1๏
+Release Summary๏
Maintenance release.
Bugfixes๏
+Bugfixes๏
Include
PSF-license.txtfile forplugins/module_utils/_version.py.
v2.3.0๏
-Release Summary๏
+v2.3.0๏
+Release Summary๏
Feature and bugfix release.
Minor Changes๏
+Minor Changes๏
Prepare collection for inclusion in an Execution Environment by declaring its dependencies. Please note that system packages are used for cryptography and PyOpenSSL, which can be rather limited. If you need features from newer cryptography versions, you will have to manually force a newer version to be installed by pip by specifying something like
cryptography >= 37.0.0in your Execution Environmentโs Python dependencies file (https://github.com/ansible-collections/community.crypto/pull/440).Support automatic conversion for Internalionalized Domain Names (IDNs). When passing general names, for example Subject Alternative Names to
community.crypto.openssl_csr, these will automatically be converted to IDNA. Conversion will be done per label to IDNA2008 if possible, and IDNA2003 if IDNA2008 conversion fails for that label. Note that IDNA conversion requires the Python idna library to be installed. Please note that depending on which versions of the cryptography library are used, it could try to process the converted IDNA another time with the Pythonidnalibrary and reject IDNA2003 encoded values. Using a new enoughcryptographyversion avoids this (https://github.com/ansible-collections/community.crypto/issues/426, https://github.com/ansible-collections/community.crypto/pull/436).
@@ -1523,8 +1703,8 @@ has been added.
x509_crl_info - add
name_encodingoption to control the encoding (IDNA, Unicode) used to return domain names in general names (https://github.com/ansible-collections/community.crypto/pull/436).
Bugfixes๏
+Bugfixes๏
Make collection more robust when PyOpenSSL is used with an incompatible cryptography version (https://github.com/ansible-collections/community.crypto/pull/445).
x509_crl - fix crash when
issuerfor a revoked certificate is specified (https://github.com/ansible-collections/community.crypto/pull/441).
@@ -1532,40 +1712,40 @@ has been added.
v2.2.4๏
-Release Summary๏
+v2.2.4๏
+Release Summary๏
Regular maintenance release.
Bugfixes๏
+Bugfixes๏
openssh_* modules - fix exception handling to report traceback to users for enhanced traceability (https://github.com/ansible-collections/community.crypto/pull/417).
v2.2.3๏
-Release Summary๏
+v2.2.3๏
+Release Summary๏
Regular bugfix release.
Bugfixes๏
+Bugfixes๏
luks_device - fix parsing of
lsblkoutput when device name ends withcrypt(https://github.com/ansible-collections/community.crypto/issues/409, https://github.com/ansible-collections/community.crypto/pull/410).
v2.2.2๏
-Release Summary๏
+v2.2.2๏
+Release Summary๏
Regular bugfix release.
In this release, we extended the test matrix to include Alpine 3, ArchLinux, Debian Bullseye, and CentOS Stream 8. CentOS 8 was removed from the test matrix.
Bugfixes๏
+Bugfixes๏
certificate_complete_chain - allow multiple potential intermediate certificates to have the same subject (https://github.com/ansible-collections/community.crypto/issues/399, https://github.com/ansible-collections/community.crypto/pull/403).
x509_certificate - for the
owncaprovider, check whether the CA private key actually belongs to the CA certificate (https://github.com/ansible-collections/community.crypto/pull/407).
@@ -1576,59 +1756,59 @@ has been added.
v2.2.1๏
-Release Summary๏
+v2.2.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
openssh_cert - fixed false
changedstatus forhostcertificates when usingfull_idempotence(https://github.com/ansible-collections/community.crypto/issues/395, https://github.com/ansible-collections/community.crypto/pull/396).
v2.2.0๏
-Release Summary๏
+v2.2.0๏
+Release Summary๏
Regular bugfix and feature release.
Minor Changes๏
+Minor Changes๏
openssh_cert - added
ignore_timestampsparameter so it can be used semi-idempotent with relative timestamps invalid_to/valid_from(https://github.com/ansible-collections/community.crypto/issues/379).
Bugfixes๏
+Bugfixes๏
luks_devices - set
LANGand similar environment variables to avoid translated output, which can break some of the moduleโs functionality like key management (https://github.com/ansible-collections/community.crypto/pull/388, https://github.com/ansible-collections/community.crypto/issues/385).
v2.1.0๏
-Release Summary๏
+v2.1.0๏
+Release Summary๏
Feature and bugfix release.
Minor Changes๏
+Minor Changes๏
Adjust error messages that indicate
cryptographyis not installed fromCan'ttoCannot(https://github.com/ansible-collections/community.crypto/pull/374).
Bugfixes๏
+Bugfixes๏
Various modules and plugins - use vendored version of
distutils.versioninstead of the deprecated Python standard librarydistutils(https://github.com/ansible-collections/community.crypto/pull/353).certificate_complete_chain - do not append root twice if the chain already ends with a root certificate (https://github.com/ansible-collections/community.crypto/pull/360).
certificate_complete_chain - do not hang when infinite loop is found (https://github.com/ansible-collections/community.crypto/issues/355, https://github.com/ansible-collections/community.crypto/pull/360).
New Modules๏
+New Modules๏
community.crypto.crypto_info - Retrieve cryptographic capabilities
community.crypto.openssl_privatekey_convert - Convert OpenSSL private keys
@@ -1636,26 +1816,26 @@ has been added.
v2.0.2๏
-Release Summary๏
+v2.0.2๏
+Release Summary๏
Documentation fix release. No actual code changes.
v2.0.1๏
-Release Summary๏
+v2.0.1๏
+Release Summary๏
Bugfix release with extra forward compatibility for newer versions of cryptography.
Minor Changes๏
+Minor Changes๏
acme_* modules - fix usage of
fetch_urlwith changes in latest ansible-coredevelbranch (https://github.com/ansible-collections/community.crypto/pull/339).
Bugfixes๏
+Bugfixes๏
acme_certificate - avoid passing multiple certificates to
cryptographyโs X.509 certificate loader whenfullchain_destis used (https://github.com/ansible-collections/community.crypto/pull/324).get_certificate, openssl_csr_info, x509_certificate_info - add fallback code for extension parsing that works with cryptography 36.0.0 and newer. This code re-serializes de-serialized extensions and thus can return slightly different values if the extension in the original CSR resp. certificate was not canonicalized correctly. This code is currently used as a fallback if the existing code stops working, but we will switch it to be the main code in a future release (https://github.com/ansible-collections/community.crypto/pull/331).
@@ -1665,13 +1845,13 @@ has been added.
v2.0.0๏
-Release Summary๏
+v2.0.0๏
+Release Summary๏
A new major release of the community.crypto collection. The main changes are removal of the PyOpenSSL backends for almost all modules (openssl_pkcs12 being the only exception), and removal of the assertonly provider in the x509_certificate provider. There are also some other breaking changes which should improve the user interface/experience of this collection long-term.
Minor Changes๏
+Minor Changes๏
acme_certificate - the
subjectandissuerfields in in theselect_chainentries are now more strictly validated (https://github.com/ansible-collections/community.crypto/pull/316).openssl_csr, openssl_csr_pipe - provide a new
subject_orderedoption if the order of the components in the subject is of importance (https://github.com/ansible-collections/community.crypto/issues/291, https://github.com/ansible-collections/community.crypto/pull/316).
@@ -1683,7 +1863,7 @@ has been added.
Breaking Changes / Porting Guide๏
+Breaking Changes / Porting Guide๏
Adjust
dirNametext parsing and to text converting code to conform to Sections 2 and 3 of RFC 4514. This is similar to how cryptography handles this (https://github.com/ansible-collections/community.crypto/pull/274).acme module utils - removing compatibility code (https://github.com/ansible-collections/community.crypto/pull/290).
@@ -1697,14 +1877,14 @@ has been added.
x509_crl - for idempotency checks, the
issuerorder is ignored. If order is important, use the newissuer_orderedoption (https://github.com/ansible-collections/community.crypto/pull/316).
Deprecated Features๏
+Deprecated Features๏
acme_* modules - ACME version 1 is now deprecated and support for it will be removed in community.crypto 2.0.0 (https://github.com/ansible-collections/community.crypto/pull/288).
Removed Features (previously deprecated)๏
+Removed Features (previously deprecated)๏
acme_* modules - the
acme_directoryoption is now required (https://github.com/ansible-collections/community.crypto/pull/290).acme_* modules - the
acme_versionoption is now required (https://github.com/ansible-collections/community.crypto/pull/290).
@@ -1731,8 +1911,8 @@ has been added.
x509_certificate_pipe - removed the
pyopensslbackend (https://github.com/ansible-collections/community.crypto/pull/273).
Bugfixes๏
+Bugfixes๏
cryptography backend - improve Unicode handling for Python 2 (https://github.com/ansible-collections/community.crypto/pull/313).
get_certificate - fix compatibility with the cryptography 35.0.0 release (https://github.com/ansible-collections/community.crypto/pull/294).
@@ -1743,13 +1923,13 @@ has been added.
v1.9.4๏
-Release Summary๏
+v1.9.4๏
+Release Summary๏
Regular bugfix release.
Bugfixes๏
+Bugfixes๏
acme_* modules - fix commands composed for OpenSSL backend to retrieve information on CSRs and certificates from stdin to use
/dev/stdininstead of-. This is needed for OpenSSL 1.0.1 and 1.0.2, apparently (https://github.com/ansible-collections/community.crypto/pull/279).acme_challenge_cert_helper - only return exception when cryptography is not installed, not when a too old version of it is installed. This prevents Ansibleโs callback to crash (https://github.com/ansible-collections/community.crypto/pull/281).
@@ -1757,47 +1937,47 @@ has been added.
v1.9.3๏
-Release Summary๏
+v1.9.3๏
+Release Summary๏
Regular bugfix release.
Bugfixes๏
+Bugfixes๏
openssl_csr and openssl_csr_pipe - make sure that Unicode strings are used to compare strings with the cryptography backend. This fixes idempotency problems with non-ASCII letters on Python 2 (https://github.com/ansible-collections/community.crypto/issues/270, https://github.com/ansible-collections/community.crypto/pull/271).
v1.9.2๏
-Release Summary๏
+v1.9.2๏
+Release Summary๏
Bugfix release to fix the changelog. No other change compared to 1.9.0.
v1.9.1๏
-Release Summary๏
+v1.9.1๏
+Release Summary๏
Accidental 1.9.1 release. Identical to 1.9.0.
v1.9.0๏
-Release Summary๏
+v1.9.0๏
+Release Summary๏
Regular feature release.
Minor Changes๏
+Minor Changes๏
get_certificate - added
starttlsoption to retrieve certificates from servers which require clients to request an encrypted connection (https://github.com/ansible-collections/community.crypto/pull/264).openssh_keypair - added
diffsupport (https://github.com/ansible-collections/community.crypto/pull/260).
Bugfixes๏
+Bugfixes๏
keypair_backend module utils - simplify code to pass sanity tests (https://github.com/ansible-collections/community.crypto/pull/263).
openssh_keypair - fixed
cryptographybackend to preserve original file permissions when regenerating a keypair requires existing files to be overwritten (https://github.com/ansible-collections/community.crypto/pull/260).
@@ -1807,13 +1987,13 @@ has been added.
v1.8.0๏
-Release Summary๏
+v1.8.0๏
+Release Summary๏
Regular bugfix and feature release.
Minor Changes๏
+Minor Changes๏
Avoid internal ansible-core module_utils in favor of equivalent public API available since at least Ansible 2.9 (https://github.com/ansible-collections/community.crypto/pull/253).
openssh certificate module utils - new module_utils for parsing OpenSSH certificates (https://github.com/ansible-collections/community.crypto/pull/246).
@@ -1821,8 +2001,8 @@ has been added.
openssh_cert - adding
diffsupport (https://github.com/ansible-collections/community.crypto/pull/255).
Bugfixes๏
+Bugfixes๏
openssh_cert - fixed certificate generation to restore original certificate if an error is encountered (https://github.com/ansible-collections/community.crypto/pull/255).
openssh_keypair - fixed a bug that prevented custom file attributes being applied to public keys (https://github.com/ansible-collections/community.crypto/pull/257).
@@ -1830,26 +2010,26 @@ has been added.
v1.7.1๏
-Release Summary๏
+v1.7.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
openssl_pkcs12 - fix crash when loading passphrase-protected PKCS#12 files with
cryptographybackend (https://github.com/ansible-collections/community.crypto/issues/247, https://github.com/ansible-collections/community.crypto/pull/248).
v1.7.0๏
-Release Summary๏
+v1.7.0๏
+Release Summary๏
Regular feature and bugfix release.
Minor Changes๏
+Minor Changes๏
cryptography_openssh module utils - new module_utils for managing asymmetric keypairs and OpenSSH formatted/encoded asymmetric keypairs (https://github.com/ansible-collections/community.crypto/pull/213).
openssh_keypair - added
backendparameter for selecting between the cryptography library or the OpenSSH binary for the execution of actions performed byopenssh_keypair(https://github.com/ansible-collections/community.crypto/pull/236).
@@ -1872,55 +2052,55 @@ has been added.
x509_crl_info - refactor module to allow code reuse for diff mode (https://github.com/ansible-collections/community.crypto/pull/203).
Bugfixes๏
+Bugfixes๏
openssh_keypair - fix
check_modeto populate return values for existing keypairs (https://github.com/ansible-collections/community.crypto/issues/113, https://github.com/ansible-collections/community.crypto/pull/230).various modules - prevent crashes when modules try to set attributes on not yet existing files in check mode. This will be fixed in ansible-core 2.12, but it is not backported to every Ansible version we support (https://github.com/ansible-collections/community.crypto/issue/242, https://github.com/ansible-collections/community.crypto/pull/243).
x509_certificate - fix crash when
assertonlyprovider is used and some error conditions should be reported (https://github.com/ansible-collections/community.crypto/issues/240, https://github.com/ansible-collections/community.crypto/pull/241).
New Modules๏
+New Modules๏
community.crypto.openssl_publickey_info - Provide information for OpenSSL public keys
v1.6.2๏
-Release Summary๏
+v1.6.2๏
+Release Summary๏
Bugfix release. Fixes compatibility issue of ACME modules with step-ca.
Bugfixes๏
+Bugfixes๏
acme_* modules - avoid crashing for ACME servers where the
metadirectory key is not present (https://github.com/ansible-collections/community.crypto/issues/220, https://github.com/ansible-collections/community.crypto/pull/221).
v1.6.1๏
-Release Summary๏
+v1.6.1๏
+Release Summary๏
Bugfix release.
Bugfixes๏
+Bugfixes๏
acme_* modules - fix wrong usages of
ACMEProtocolException(https://github.com/ansible-collections/community.crypto/pull/216, https://github.com/ansible-collections/community.crypto/pull/217).
v1.6.0๏
-Release Summary๏
+v1.6.0๏
+Release Summary๏
Fixes compatibility issues with the latest ansible-core 2.11 beta, and contains a lot of internal refactoring for the ACME modules and support for private key passphrases for them.
Minor Changes๏
+Minor Changes๏
acme module_utils - the
acmemodule_utils has been split up into several Python modules (https://github.com/ansible-collections/community.crypto/pull/184).acme_* modules - codebase refactor which should not be visible to end-users (https://github.com/ansible-collections/community.crypto/pull/184).
@@ -1929,14 +2109,14 @@ has been added.
acme_challenge_cert_helper - add
private_key_passphraseparameter (https://github.com/ansible-collections/community.crypto/pull/207).
Deprecated Features๏
+Deprecated Features๏
acme module_utils - the
acmemodule_utils (ansible_collections.community.crypto.plugins.module_utils.acme) is deprecated and will be removed in community.crypto 2.0.0. Use the new Python modules in theacmepackage instead (ansible_collections.community.crypto.plugins.module_utils.acme.xxx) (https://github.com/ansible-collections/community.crypto/pull/184).
Bugfixes๏
+Bugfixes๏
action_module plugin helper - make compatible with latest changes in ansible-core 2.11.0b3 (https://github.com/ansible-collections/community.crypto/pull/202).
openssl_privatekey_pipe - make compatible with latest changes in ansible-core 2.11.0b3 (https://github.com/ansible-collections/community.crypto/pull/202).
@@ -1944,39 +2124,39 @@ has been added.
v1.5.0๏
-Release Summary๏
+v1.5.0๏
+Release Summary๏
Regular feature and bugfix release. Deprecates a return value.
Minor Changes๏
+Minor Changes๏
acme_account_info - when
retrieve_ordersis notignoreand the ACME server allows to query orders, the new return valueorder_urisis always populated with a list of URIs (https://github.com/ansible-collections/community.crypto/pull/178).luks_device - allow to specify sector size for LUKS2 containers with new
sector_sizeparameter (https://github.com/ansible-collections/community.crypto/pull/193).
Deprecated Features๏
+Deprecated Features๏
acme_account_info - when
retrieve_orders=url_list,orderswill no longer be returned in community.crypto 2.0.0. Useorder_urisinstead (https://github.com/ansible-collections/community.crypto/pull/178).
Bugfixes๏
+Bugfixes๏
openssl_csr - no longer fails when comparing CSR without basic constraint when
basic_constraintsis specified (https://github.com/ansible-collections/community.crypto/issues/179, https://github.com/ansible-collections/community.crypto/pull/180).
v1.4.0๏
-Release Summary๏
+v1.4.0๏
+Release Summary๏
Release with several new features and bugfixes.
Minor Changes๏
+Minor Changes๏
The ACME module_utils has been relicensed back from the Simplified BSD License (https://opensource.org/licenses/BSD-2-Clause) to the GPLv3+ (same license used by most other code in this collection). This undoes a licensing change when the original GPLv3+ licensed code was moved to module_utils in https://github.com/ansible/ansible/pull/40697 (https://github.com/ansible-collections/community.crypto/pull/165).
The
crypto/identify.pymodule_utils has been renamed tocrypto/pem.py(https://github.com/ansible-collections/community.crypto/pull/166).
@@ -1986,21 +2166,21 @@ has been added.
openssl_pkcs12 - allow to specify certificate bundles in
other_certificatesby using new optionother_certificates_parse_all(https://github.com/ansible-collections/community.crypto/issues/149, https://github.com/ansible-collections/community.crypto/pull/166).
Bugfixes๏
+Bugfixes๏
acme_certificate - error when requested challenge type is not found for non-valid challenges, instead of hanging on step 2 (https://github.com/ansible-collections/community.crypto/issues/171, https://github.com/ansible-collections/community.crypto/pull/173).
v1.3.0๏
-Release Summary๏
+v1.3.0๏
+Release Summary๏
Contains new modules openssl_privatekey_pipe, openssl_csr_pipe and x509_certificate_pipe which allow to create or update private keys, CSRs and X.509 certificates without having to write them to disk.
Minor Changes๏
+Minor Changes๏
openssh_cert - add module parameter
use_agentto enable using signing keys stored in ssh-agent (https://github.com/ansible-collections/community.crypto/issues/116).openssl_csr - refactor module to allow code reuse by openssl_csr_pipe (https://github.com/ansible-collections/community.crypto/pull/123).
@@ -2010,16 +2190,16 @@ has been added.
x509_certificate - refactor module to allow code reuse by x509_certificate_pipe (https://github.com/ansible-collections/community.crypto/pull/135).
Bugfixes๏
+Bugfixes๏
openssl_pkcs12 - report the correct state when
actionisparse(https://github.com/ansible-collections/community.crypto/issues/143).support code - improve handling of certificate and certificate signing request (CSR) loading with the
cryptographybackend when errors occur (https://github.com/ansible-collections/community.crypto/issues/138, https://github.com/ansible-collections/community.crypto/pull/139).x509_certificate - fix
entrustprovider, which was broken since community.crypto 0.1.0 due to a feature added before the collection move (https://github.com/ansible-collections/community.crypto/pull/135).
New Modules๏
+New Modules๏
community.crypto.openssl_csr_pipe - Generate OpenSSL Certificate Signing Request (CSR)
community.crypto.openssl_privatekey_pipe - Generate OpenSSL private keys without disk access
@@ -2028,20 +2208,20 @@ has been added.
v1.2.0๏
-Release Summary๏
+v1.2.0๏
+Release Summary๏
Please note that this release fixes a security issue (CVE-2020-25646).
Minor Changes๏
+Minor Changes๏
acme_certificate - allow to pass CSR file as content with new option
csr_content(https://github.com/ansible-collections/community.crypto/pull/115).x509_certificate_info - add
fingerprintsreturn value which returns certificate fingerprints (https://github.com/ansible-collections/community.crypto/pull/121).
Security Fixes๏
+Security Fixes๏
openssl_csr - the option
privatekey_contentwas not marked asno_log, resulting in it being dumped into the system log by default, and returned in the registered results in theinvocationfield (CVE-2020-25646, https://github.com/ansible-collections/community.crypto/pull/125).openssl_privatekey_info - the option
contentwas not marked asno_log, resulting in it being dumped into the system log by default, and returned in the registered results in theinvocationfield (CVE-2020-25646, https://github.com/ansible-collections/community.crypto/pull/125).
@@ -2051,21 +2231,21 @@ has been added.
x509_crl - the option
privatekey_contentwas not marked asno_log, resulting in it being dumped into the system log by default, and returned in the registered results in theinvocationfield (CVE-2020-25646, https://github.com/ansible-collections/community.crypto/pull/125).
Bugfixes๏
+Bugfixes๏
openssl_pkcs12 - do not crash when reading PKCS#12 file which has no private key and/or no main certificate (https://github.com/ansible-collections/community.crypto/issues/103).
v1.1.1๏
-Release Summary๏
+v1.1.1๏
+Release Summary๏
Bugfixes for Ansible 2.10.0.
Bugfixes๏
+Bugfixes๏
meta/runtime.yml - convert Ansible version numbers for old names of modules to collection version numbers (https://github.com/ansible-collections/community.crypto/pull/108).
openssl_csr - improve handling of IDNA errors (https://github.com/ansible-collections/community.crypto/issues/105).
@@ -2073,13 +2253,13 @@ has been added.
v1.1.0๏
-Release Summary๏
+v1.1.0๏
+Release Summary๏
Release for Ansible 2.10.0.
Minor Changes๏
+Minor Changes๏
acme_account - add
external_account_bindingoption to allow creation of ACME accounts with External Account Binding (https://github.com/ansible-collections/community.crypto/issues/89).acme_certificate - allow new selector
test_certificates: firstforselect_chainparameter (https://github.com/ansible-collections/community.crypto/pull/102).
@@ -2092,16 +2272,16 @@ has been added.
openssl_csr_info - add support for name constraints extension (https://github.com/ansible-collections/community.crypto/issues/46).
Bugfixes๏
+Bugfixes๏
acme_inspect - fix problem with Python 3.5 that JSON was not decoded (https://github.com/ansible-collections/community.crypto/issues/86).
get_certificate - fix
ca_certoption handling whenproxy_hostis used (https://github.com/ansible-collections/community.crypto/pull/84).openssl_*, x509_* modules - fix handling of general names which refer to IP networks and not IP addresses (https://github.com/ansible-collections/community.crypto/pull/92).
New Modules๏
+New Modules๏
community.crypto.openssl_signature - Sign data with openssl
community.crypto.openssl_signature_info - Verify signatures with openssl
@@ -2109,13 +2289,13 @@ has been added.
v1.0.0๏
-Release Summary๏
+v1.0.0๏
+Release Summary๏
This is the first proper release of the community.crypto collection. This changelog contains all changes to the modules in this collection that were added after the release of Ansible 2.9.0.
Minor Changes๏
+Minor Changes๏
luks_device - accept
passphrase,new_passphraseandremove_passphrase.luks_device - add
keysizeparameter to set key size at LUKS container creation
@@ -2144,20 +2324,20 @@ has been added.
openssl_publickey - allow to return the existing/generated public key directly as
publickeyby settingreturn_contenttoyes.
Deprecated Features๏
+Deprecated Features๏
openssl_csr - all values for the
versionoption except1are deprecated. The value 1 denotes the current only standardized CSR version.
Removed Features (previously deprecated)๏
+Removed Features (previously deprecated)๏
The
letsencryptmodule has been removed. Useacme_certificateinstead.
Bugfixes๏
+Bugfixes๏
ACME modules: fix bug in ACME v1 account update code
ACME modules: make sure some connection errors are handled properly
@@ -2180,8 +2360,8 @@ has been added.
openssl_publickey - fix a module crash caused when pyOpenSSL is not installed (https://github.com/ansible/ansible/issues/67035).
New Modules๏
+New Modules๏
community.crypto.ecs_domain - Request validation of a domain with the Entrust Certificate Services (ECS) API
community.crypto.x509_crl - Generate Certificate Revocation Lists (CRLs)
diff --git a/pr/757/crypto_info_module.html b/pr/757/crypto_info_module.html
index 4d06bf41..389259c8 100644
--- a/pr/757/crypto_info_module.html
+++ b/pr/757/crypto_info_module.html
@@ -1,8 +1,10 @@
+
+
-
+
- community.crypto.ecs_domain module โ Request validation of a domain with the Entrust Certificate Services (ECS) API
- community.crypto.get_certificate module โ Get a certificate from a host:port
- community.crypto.luks_device module โ Manage encrypted (LUKS) devices -
- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates. +
- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates
- community.crypto.openssh_keypair module โ Generate OpenSSH private and public keys
- community.crypto.openssl_csr module โ Generate OpenSSL Certificate Signing Request (CSR)
- community.crypto.openssl_csr_info module โ Provide information of OpenSSL Certificate Signing Requests (CSR) @@ -123,7 +121,7 @@
- community.crypto.openssl_privatekey_convert module โ Convert OpenSSL private keys
- community.crypto.openssl_privatekey_info module โ Provide information for OpenSSL private keys
- community.crypto.openssl_privatekey_pipe module โ Generate OpenSSL private keys without disk access -
- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key. +
- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key
- community.crypto.openssl_publickey_info module โ Provide information for OpenSSL public keys
- community.crypto.openssl_signature module โ Sign data with openssl
- community.crypto.openssl_signature_info module โ Verify signatures with openssl @@ -181,7 +179,7 @@
community.crypto.crypto_info module โ Retrieve cryptographic capabilities๏
Note
-This module is part of the community.crypto collection (version 2.21.0).
+This module is part of the community.crypto collection (version 2.24.0).
It is not included in ansible-core.
To check whether it is installed, run ansible-galaxy collection list.
To install it, use: ansible-galaxy collection install community.crypto.
Will return details on what has changed (or possibly needs changing in check_mode), when in diff mode.
Support: full
+This action does not modify state.
+When run twice in a row outside check mode, with the same arguments, the second invocation indicates no change.
+This assumes that the system controlled/queried by the module has not changed in a relevant way.
+
- Issue Tracker
- Repository (Sources)
+- Ask for help (crypto)
+- Ask for help (ACME)
- Submit a bug report
- Request a feature
- Communication
diff --git a/pr/757/docsite/guide_ownca.html b/pr/757/docsite/guide_ownca.html
index a6346ccb..4bc18c79 100644
--- a/pr/757/docsite/guide_ownca.html
+++ b/pr/757/docsite/guide_ownca.html
@@ -1,3 +1,5 @@
+
+
@@ -12,15 +14,11 @@
-
-
-
-
-
-
-
+
+
+
+
+
@@ -105,7 +103,7 @@
- community.crypto.ecs_domain module โ Request validation of a domain with the Entrust Certificate Services (ECS) API
- community.crypto.get_certificate module โ Get a certificate from a host:port
- community.crypto.luks_device module โ Manage encrypted (LUKS) devices
-- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates.
+- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates
- community.crypto.openssh_keypair module โ Generate OpenSSH private and public keys
- community.crypto.openssl_csr module โ Generate OpenSSL Certificate Signing Request (CSR)
- community.crypto.openssl_csr_info module โ Provide information of OpenSSL Certificate Signing Requests (CSR)
@@ -116,7 +114,7 @@
- community.crypto.openssl_privatekey_convert module โ Convert OpenSSL private keys
- community.crypto.openssl_privatekey_info module โ Provide information for OpenSSL private keys
- community.crypto.openssl_privatekey_pipe module โ Generate OpenSSL private keys without disk access
-- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key.
+- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key
- community.crypto.openssl_publickey_info module โ Provide information for OpenSSL public keys
- community.crypto.openssl_signature module โ Sign data with openssl
- community.crypto.openssl_signature_info module โ Verify signatures with openssl
diff --git a/pr/757/docsite/guide_selfsigned.html b/pr/757/docsite/guide_selfsigned.html
index 1367c16e..edffb9e2 100644
--- a/pr/757/docsite/guide_selfsigned.html
+++ b/pr/757/docsite/guide_selfsigned.html
@@ -1,3 +1,5 @@
+
+
@@ -12,15 +14,11 @@
-
-
-
-
-
-
-
+
+
+
+
+
@@ -101,7 +99,7 @@
- community.crypto.ecs_domain module โ Request validation of a domain with the Entrust Certificate Services (ECS) API
- community.crypto.get_certificate module โ Get a certificate from a host:port
- community.crypto.luks_device module โ Manage encrypted (LUKS) devices
-- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates.
+- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates
- community.crypto.openssh_keypair module โ Generate OpenSSH private and public keys
- community.crypto.openssl_csr module โ Generate OpenSSL Certificate Signing Request (CSR)
- community.crypto.openssl_csr_info module โ Provide information of OpenSSL Certificate Signing Requests (CSR)
@@ -112,7 +110,7 @@
- community.crypto.openssl_privatekey_convert module โ Convert OpenSSL private keys
- community.crypto.openssl_privatekey_info module โ Provide information for OpenSSL private keys
- community.crypto.openssl_privatekey_pipe module โ Generate OpenSSL private keys without disk access
-- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key.
+- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key
- community.crypto.openssl_publickey_info module โ Provide information for OpenSSL public keys
- community.crypto.openssl_signature module โ Sign data with openssl
- community.crypto.openssl_signature_info module โ Verify signatures with openssl
diff --git a/pr/757/ecs_certificate_module.html b/pr/757/ecs_certificate_module.html
index 7afa7be4..1747c8a7 100644
--- a/pr/757/ecs_certificate_module.html
+++ b/pr/757/ecs_certificate_module.html
@@ -1,8 +1,10 @@
+
+
-
+
community.crypto.ecs_certificate module โ Request SSL/TLS certificates with the Entrust Certificate Services (ECS) API — Community.Crypto Collection documentation
@@ -13,15 +15,11 @@
-
-
-
-
-
-
-
+
+
+
+
+
@@ -116,7 +114,7 @@
- community.crypto.ecs_domain module โ Request validation of a domain with the Entrust Certificate Services (ECS) API
- community.crypto.get_certificate module โ Get a certificate from a host:port
- community.crypto.luks_device module โ Manage encrypted (LUKS) devices
-- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates.
+- community.crypto.openssh_cert module โ Generate OpenSSH host or user certificates
- community.crypto.openssh_keypair module โ Generate OpenSSH private and public keys
- community.crypto.openssl_csr module โ Generate OpenSSL Certificate Signing Request (CSR)
- community.crypto.openssl_csr_info module โ Provide information of OpenSSL Certificate Signing Requests (CSR)
@@ -127,7 +125,7 @@
- community.crypto.openssl_privatekey_convert module โ Convert OpenSSL private keys
- community.crypto.openssl_privatekey_info module โ Provide information for OpenSSL private keys
- community.crypto.openssl_privatekey_pipe module โ Generate OpenSSL private keys without disk access
-- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key.
+- community.crypto.openssl_publickey module โ Generate an OpenSSL public key from its private key
- community.crypto.openssl_publickey_info module โ Provide information for OpenSSL public keys
- community.crypto.openssl_signature module โ Sign data with openssl
- community.crypto.openssl_signature_info module โ Verify signatures with openssl
@@ -185,7 +183,7 @@
community.crypto.ecs_certificate module โ Request SSL/TLS certificates with the Entrust Certificate Services (ECS) API๏
Note
-This module is part of the community.crypto collection (version 2.21.0).
+This module is part of the community.crypto collection (version 2.24.0).
It is not included in ansible-core.
To check whether it is installed, run ansible-galaxy collection list.
To install it, use: ansible-galaxy collection install community.crypto.
@@ -497,105 +495,105 @@ see
text1
string