short glade
i am attermpting to create a root-ca self signed digital cert with the following options for vserver xyz
vserver
common-nmae
type
size
country
state
locality
organizaion
unit
email-addr
expire-days
it doen't appear that the netapp.ontap.na_ontap_security_certificates module has all of the parameters that the cli allows. i've also attempted using the netapp.ontap.na_ontap_rest_cli module without success.
fringe storm
The Ansible modules are based off the ontap REST API. Not all CLI options eixst in the rest api (or may have different names).
There mapping for the security-certifcate here https://docs.netapp.com/us-en/ontap-restmap-9131/security-certificate.html#security-certificate-get
short glade
chris, i had never seen the mapping doc before. thanks for sharing.
short glade
chris, could i not have used the netapp.ontap.na_ontap_rest_cli module to execute the cli command that would have create that self signed cert? am i missing something?
floral peak
I would create the certificate locally on the client (e.g. by using openssl), and then upload it (together with the private key) into ONTAP. That's how it had to be done before support for SANs was implemented in the ONTAP CLI command (and you can still do more finetuning of the certificate if you create it externally)