dns

OpenWrt: installing dig from opkg

For troubleshooting DNS issues, running the dig utility directly from OpenWrt can be essential.  This is easily done by installing the ‘bind-dig’ package as shown below. opkg update opkg install bind-dig

Ansible: creating SAN certificates with a custom root CA

Ansible has support for generating self-signed certificates as well as certificates using a custom root CA (certificate authority).  This is possible using the community.crypto collection. I’ve put this into a role named ansible-role-cert-with-ca available on github, and it can be used from a playbook like below: vars: # custom CA, leaving undefined will create self-signed Ansible: creating SAN certificates with a custom root CA