Forum Discussion
Samir
MVP
MVPGenerate csr via ansible script
Hi All,
Did any one tried to create CSR via f5 ansible module. I am trying my but can't make it. Written below script but it is unable to find ansible module for csr.
- name: Generate F5 BI...
SamirMVP
MVPAbove link is only helpful for self-sign cert with no parameter such as (not Country, No Organization, etc). I wanted to generate CA based CSR, so that later i can send to CA for public cert. Used both module bigip_ssl_csr and bigip_device_certificate_csr but no luck.
msg: 'Unsupported parameters for (f5networks.f5_modules.bigip_ssl_csr) module: algorithm, key_size, key_type, mode, subject_alternative_names. Supported parameters include: common_name, dest, force, key_name, name, provider, state.'
I don't see much example.
nrcasperson
Nimbostratus
NimbostratusThis worked for me: https://clouddocs.f5.com/products/orchestration/ansible/devel/f5_bigip/modules_2_0/bigip_ssl_csr_module.html
An equivalent TMSH command would be:
tmsh create sys crypto csr www.example.com.csr common-name www.example.com key www.example.com.key subject-alternative-name "DNS:www.example.com, DNS:www2.example.com" country US organization "ACME" ou "Team, Organization, Sales"