Improve ACME profile support.

ansible-collections · Jan 19, 2025 · 0e122e5 · 0e122e5
1 parent 47ea1af
commit 0e122e5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/plugins/modules/acme_certificate_order_info.py b/plugins/modules/acme_certificate_order_info.py
@@ -182,6 +182,13 @@
           certificate ID of the certificate that will be replaced by this order.
       type: str
       returned: when the certificate order is replacing a certificate through draft-ietf-acme-ari
+    profile:
+      description:
+        - If the ACME CA supports profiles through the L(draft-aaron-acme-profiles,
+          https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/) mechanism and informs about the profile
+          selected for this order, this field will contain the name of the profile used.
+      type: str
+      returned: depending on the ACME CA
 authorizations_by_identifier:
   description:
     - A dictionary mapping identifiers to their authorization objects.

diff --git a/tests/integration/targets/acme_certificate_order/tasks/impl.yml b/tests/integration/targets/acme_certificate_order/tasks/impl.yml
@@ -382,6 +382,7 @@
         csr: "{{ remote_tmp_dir }}/cert.csr"
         replaces_cert_id: "{{ cert_info.cert_id }}"
         order_creation_error_strategy: fail
+        profile: "{{ '90days' if acme_supports_profiles else omit }}"
       register: replacement_order_1
 
     - name: "({{ select_crypto_backend }}) Get replacement order 1 information"