Skip to content

hashicorp-modules/tls-private-key

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

TLS Private Key Terraform Module

  • Generates a secure RSA or ECDAS private key
  • Encodes the private key as PEM
  • Downloads the private key locally and sets the file permission to 0600

Checkout examples for fully functioning examples.

Environment Variables

This module doesn't require any environment variables to be set.

Input Variables

  • create: [Optional] Create Module, defaults to true.
  • name: [Optional] Filename to write the private key data to, default to "tls-private-key".
  • algorithm: [Optional] The name of the algorithm to use for the key. Currently-supported values are "RSA" and "ECDSA". Defaults to "RSA"
  • rsa_bits: [Optional] When algorithm is "RSA", the size of the generated RSA key in bits. Defaults to "2048".
  • ecdsa_curve: [Optional] When algorithm is "ECDSA", the name of the elliptic curve to use. May be any one of "P224", "P256", "P384" or "P521". Defaults to "P224".
  • permissions: [Optional] The Unix file permission to assign to the cert files (e.g. 0600), defaults to "0600".

Outputs

  • algorithm: The algorithm that was selected for the key.
  • private_key_pem: The private key data in PEM format.
  • private_key_name: The private key filename.
  • private_key_filename: The private key filename with file extension.
  • public_key_pem: The public key data in PEM format.
  • public_key_openssh: The public key data in OpenSSH authorized_keys format, if the selected private key format is compatible. All RSA keys are supported, and ECDSA keys with curves "P256", "P384" and "P251" are supported. This attribute is empty if an incompatible ECDSA curve is selected.

Submodules

This module has no submodules.

Authors

HashiCorp Solutions Engineering Team.

License

Mozilla Public License Version 2.0. See LICENSE for full details.