ansible-role-ssh-cert/files/ssh-cert-renew

#!/usr/bin/env sh
set -e
ssh_ca_host="$1"
filepf="$2"
>"${filepf}-cert.pub.tmp" ssh -o BatchMode=true -i "${filepf}" "${ssh_ca_host}" renew show
mv "${filepf}-cert.pub.tmp" "${filepf}-cert.pub"