Community.Crypto

Collection version 3.2.2

Description
Communication
Changelog
Scenario Guides
Plugin Index

Description

Provides modules and plugins for many cryptographic operations.

Author:

Ansible (github.com/ansible)

Supported ansible-core versions:

2.17.0 or newer

Communication

Forum: Ansible Forum: General usage and support questions.
Forum: Ansible Forum: Discussions about cryptography.
Forum: Ansible Forum: Discussions about ACME (RFC 8555).
Matrix room #users:ansible.im: General usage and support questions.
IRC channel #ansible (Libera network): General usage and support questions.

Changelog

Community.Crypto Release Notes

Scenario Guides

Plugin Index

These are the plugins in the community.crypto collection:

Modules

acme_account module – Create, modify or delete ACME accounts
acme_account_info module – Retrieves information on ACME accounts
acme_ari_info module – Retrieves ACME Renewal Information (ARI) for a certificate
acme_certificate module – Create SSL/TLS certificates with the ACME protocol
acme_certificate_deactivate_authz module – Deactivate all authz for an ACME v2 order
acme_certificate_order_create module – Create an ACME v2 order
acme_certificate_order_finalize module – Finalize an ACME v2 order
acme_certificate_order_info module – Obtain information for an ACME v2 order
acme_certificate_order_validate module – Validate authorizations of an ACME v2 order
acme_certificate_renewal_info module – Determine whether a certificate should be renewed or not
acme_certificate_revoke module – Revoke certificates with the ACME protocol
acme_challenge_cert_helper module – Prepare certificates required for ACME challenges such as tls-alpn-01
acme_inspect module – Send direct requests to an ACME server
certificate_complete_chain module – Complete certificate chain given a set of untrusted and root certificates
crypto_info module – Retrieve cryptographic capabilities
get_certificate module – Get a certificate from a host:port
luks_device module – Manage encrypted (LUKS) devices
openssh_cert module – Generate OpenSSH host or user certificates
openssh_keypair module – Generate OpenSSH private and public keys
openssl_csr module – Generate OpenSSL Certificate Signing Request (CSR)
openssl_csr_info module – Provide information of OpenSSL Certificate Signing Requests (CSR)
openssl_csr_pipe module – Generate OpenSSL Certificate Signing Request (CSR)
openssl_dhparam module – Generate OpenSSL Diffie-Hellman Parameters
openssl_pkcs12 module – Generate OpenSSL PKCS#12 archive
openssl_privatekey module – Generate OpenSSL private keys
openssl_privatekey_convert module – Convert OpenSSL private keys
openssl_privatekey_info module – Provide information for OpenSSL private keys
openssl_privatekey_pipe module – Generate OpenSSL private keys without disk access
openssl_publickey module – Generate an OpenSSL public key from its private key
openssl_publickey_info module – Provide information for OpenSSL public keys
openssl_signature module – Sign data with openssl
openssl_signature_info module – Verify signatures with openssl
x509_certificate module – Generate and/or check OpenSSL certificates
x509_certificate_convert module – Convert X.509 certificates
x509_certificate_info module – Provide information of OpenSSL X.509 certificates
x509_certificate_pipe module – Generate and/or check OpenSSL certificates
x509_crl module – Generate Certificate Revocation Lists (CRLs)
x509_crl_info module – Retrieve information on Certificate Revocation Lists (CRLs)

Filter Plugins

acme_dns_persist_record filter – Craft a DNS record for ACME dns-persist-01 challenges
acme_dns_persist_record_parse filter – Parse a DNS record for ACME dns-persist-01 challenges
gpg_fingerprint filter – Retrieve a GPG fingerprint from a GPG public or private key
openssl_csr_info filter – Retrieve information from OpenSSL Certificate Signing Requests (CSR)
openssl_privatekey_info filter – Retrieve information from OpenSSL private keys
openssl_publickey_info filter – Retrieve information from OpenSSL public keys in PEM format
parse_serial filter – Convert a serial number as a colon-separated list of hex numbers to an integer
split_pem filter – Split PEM file contents into multiple objects
to_serial filter – Convert an integer to a colon-separated list of hex numbers
x509_certificate_info filter – Retrieve information from X.509 certificates in PEM format
x509_crl_info filter – Retrieve information from X.509 CRLs in PEM format

Lookup Plugins

gpg_fingerprint lookup – Retrieve a GPG fingerprint from a GPG public or private key file