tls_cert_request

Generates a Certificate Signing Request (CSR) in PEM format, which is the typical format used to request a certificate from a certificate authority.

This resource is intended to be used in conjunction with a Terraform provider for a particular certificate authority in order to provision a new certificate. This is a logical resource, so it contributes only to the current Terraform state and does not create any external managed resources.

Compatibility Note From Terraform 0.7.0 to 0.7.4 this resource was converted to a data source, and the resource form of it was deprecated. This turned out to be a design error since a cert request includes a random number in the form of the signature nonce, and so the data source form of this resource caused non-convergent configuration. The data source form is no longer supported as of Terraform 0.7.5 and any users should return to using the resource form.

Example Usage

resource "tls_cert_request" "example" {
  key_algorithm   = "ECDSA"
  private_key_pem = "${file("private_key.pem")}"

  subject {
    common_name  = "example.com"
    organization = "ACME Examples, Inc"
  }
}

Argument Reference

The following arguments are supported:

• key_algorithm - (Required) The name of the algorithm for the key provided in private_key_pem.

• private_key_pem - (Required) PEM-encoded private key data. This can be read from a separate file using the file interpolation function. Only an irreversable secure hash of the private key will be stored in the Terraform state.

• subject - (Required) The subject for which a certificate is being requested. This is a nested configuration block whose structure is described below.

• dns_names - (Optional) List of DNS names for which a certificate is being requested.

• ip_addresses - (Optional) List of IP addresses for which a certificate is being requested.

The nested subject block accepts the following arguments, all optional, with their meaning corresponding to the similarly-named attributes defined in RFC5290:

• common_name (string)

• organization (string)

• organizational_unit (string)

• street_address (list of strings)

• locality (string)

• province (string)

• country (string)

• postal_code (string)

• serial_number (string)

Attributes Reference

The following attributes are exported:

• cert_request_pem - The certificate request data in PEM format.