diff --git a/tests/cert/test_cert_host.yml b/tests/cert/test_cert_host.yml index c57c6e13e177aff1c1eb39cf224f307491ee886e..1ac04efa55f66a01b718a964b8d5aeee57d1e9af 100644 --- a/tests/cert/test_cert_host.yml +++ b/tests/cert/test_cert_host.yml @@ -40,7 +40,7 @@ - name: Create CSR ansible.builtin.shell: - cmd: "openssl req -newkey rsa:1024 -keyout /dev/null -nodes -subj /CN=certhost.{{ ipa_domain }}" + cmd: "openssl req -newkey rsa:2048 -keyout /dev/null -nodes -subj /CN=certhost.{{ ipa_domain }}" register: host_req - name: Create CSR file diff --git a/tests/cert/test_cert_service.yml b/tests/cert/test_cert_service.yml index 6e42ff4fa9c5256c03acb200cdc7e82aea9b272b..b931c07cb0dad4ad12eb926836a2fc833c44b16b 100644 --- a/tests/cert/test_cert_service.yml +++ b/tests/cert/test_cert_service.yml @@ -51,7 +51,7 @@ - name: Create signing request for certificate ansible.builtin.shell: - cmd: "openssl req -newkey rsa:1024 -keyout /dev/null -nodes -subj /CN=certservice.{{ ipa_domain }}" + cmd: "openssl req -newkey rsa:2048 -keyout /dev/null -nodes -subj /CN=certservice.{{ ipa_domain }}" register: service_req - name: Create CSR file diff --git a/tests/cert/test_cert_user.yml b/tests/cert/test_cert_user.yml index 41c97bb3f2eb173aa9a7810887faae8cf2d28e30..cba90deb0f6e934594a9943d69455f16d0260177 100644 --- a/tests/cert/test_cert_user.yml +++ b/tests/cert/test_cert_user.yml @@ -36,7 +36,7 @@ - name: Crete CSR ansible.builtin.shell: cmd: - 'openssl req -newkey rsa:1024 -keyout /dev/null -nodes -subj /CN=certuser -reqexts IECUserRoles + 'openssl req -newkey rsa:2048 -keyout /dev/null -nodes -subj /CN=certuser -reqexts IECUserRoles -config <(cat /etc/pki/tls/openssl.cnf; printf "[IECUserRoles]\n1.2.840.10070.8.1=ASN1:UTF8String:hello world")' executable: /bin/bash register: user_req