Initial commit. This repo contains ansible CM that describes ECG infrastructure.

A test server (acacia root server) is already included in the inventory, with an ecg admin account.
This commit is contained in:
jose.canelas
2022-08-05 15:48:02 +01:00
commit a8269203f0
43 changed files with 2465 additions and 0 deletions

View File

@@ -0,0 +1,32 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,30 @@
# Configuration file generated by pki-authority
config['pki_default_root_sign_multiplier']='12'
config['pki_library']='openssl'
config['name_constraints_critical']='True'
config['crl']='True'
config['pki_default_ca_sign_multiplier']='10'
config['subject']='o=Ecogood/ou=Domain CA'
config['pki_default_domain_dn']=''
config['pki_default_domain']=''
config['issuer_name']='root'
config['key_size']='4096'
config['name_constraints']='True'
config['private_file_mode']='600'
config['private_dir_mode']='700'
config['public_file_mode']='644'
config['domain']='ecogood.org'
config['root_sign_days']=''
config['ocsp']='True'
config['ca_sign_days']=''
config['pki_default_cert_sign_multiplier']='3'
config['pki_default_sign_base']='365'
config['pki_default_fqdn']='blacknode'
config['system_ca']='true'
config['public_dir_mode']='755'
config['ca_type']=''
config['alt_authority']=''
config['subdomain']='domain-ca'
config['cert_sign_days']=''
config['name']='domain'

View File

@@ -0,0 +1,15 @@
# Configuration file generated by pki-authority
[ req ]
default_md = sha256
default_bits = 4096
default_keyfile = private/key.pem
prompt = no
encrypt_key = no
distinguished_name = ca_dn
utf8 = yes
string_mask = utf8only
[ ca_dn ]
organizationName=Ecogood
organizationalUnitName=Domain CA

View File

@@ -0,0 +1,59 @@
# Configuration file generated by pki-authority
[ default ]
name = domain-ca
domain_suffix = ecogood.org
aia_url = http://$name.$domain_suffix/crt/
crl_url = http://$name.$domain_suffix/crl/
ocsp_url = http://$name.$domain_suffix/ocsp/
default_ca = ca_default
name_opt = utf8,esc_ctrl,multiline,lname,align
[ ca_default ]
home = .
database = $home/database/index
serial = $home/database/serial
crlnumber = $home/database/crlnumber
certificate = $home/subject/cert.pem
private_key = $home/private/key.pem
RANDFILE = $home/private/random
new_certs_dir = $home/certs
unique_subject = no
policy = policy_default
x509_extensions = extension_default
copy_extensions = copy
default_days = 1095
default_crl_days = 30
default_md = sha256
[ crl_info ]
URI.0 = $crl_url
[ issuer_info ]
caIssuers;URI.0 = $aia_url
OCSP;URI.0 = $ocsp_url
[ extension_ocsp ]
authorityKeyIdentifier = keyid:always
basicConstraints = critical, CA:false
extendedKeyUsage = OCSPSigning
keyUsage = critical, digitalSignature
subjectKeyIdentifier = hash
[ policy_default ]
countryName = optional
stateOrProvinceName = optional
organizationName = optional
organizationalUnitName = optional
commonName = optional
emailAddress = optional
[ extension_default ]
authorityInfoAccess = @issuer_info
authorityKeyIdentifier = keyid:always, issuer:always
basicConstraints = critical, CA:FALSE
crlDistributionPoints = @crl_info
extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment
subjectKeyIdentifier = hash

View File

@@ -0,0 +1 @@
V 250802030916Z 9E11BE2C034490ED269C0FAE728EDAF1 unknown /CN=acacia.ecogood.org

View File

@@ -0,0 +1 @@
unique_subject = no

View File

@@ -0,0 +1 @@
9E11BE2C034490ED269C0FAE728EDAF2

View File

@@ -0,0 +1 @@
9e11be2c034490ed269c0fae728edaf1

View File

@@ -0,0 +1 @@
../root

View File

@@ -0,0 +1,52 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

View File

@@ -0,0 +1,35 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,26 @@
-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----