openssl_csr: allow to add arbitrary extensions

[felixfontein]

SUMMARY

See ansible/ansible#61473 for details.

The idea is to allow to specify arbitrary extension OIDs with values and critical flags. The module should add them to the CSR (resp. ensure they are present in the CSR), and make sure they don't collide with extensions added by the module itself.

Now that cryptography allows to serialize and deserialize arbitrary extensions, we can properly implement it.

ISSUE TYPE

• Feature Idea

COMPONENT NAME

openssl_csr