- SERVICE = www
+ SERVICE = stats
RANDFILE = var/sec/x509/openssl.rand
oid_section = extra_oids
[ extra_oids ]
stateOrProvinceName = $ENV::x509_state_or_province
localityName = $ENV::x509_state_or_province
0.organizationName = $ENV::x509_organization
- organizationalUnitName = Service Web
+ organizationalUnitName = Service de statistiques
commonName = $SERVICE.$ENV::x509_host
businessCategory = $ENV::x509_business_category
jurisdictionOfIncorporationLocalityName = $ENV::x509_state_or_province
jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
jurisdictionOfIncorporationCountryName = $ENV::x509_country
[ extensions ]
- basicConstraints = critical,CA:TRUE,pathlen:0
- keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
- subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+ basicConstraints = critical,CA:FALSE,pathlen:0
+ keyUsage = keyEncipherment
+ subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
subjectKeyIdentifier = hash
issuerAltName = issuer:copy
authorityKeyIdentifier = keyid:always,issuer:always
[ self_signed_extensions ]
basicConstraints = critical,CA:TRUE,pathlen:0
keyUsage = keyCertSign,cRLSign,digitalSignature,keyEncipherment
- subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+ subjectAltName = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
subjectKeyIdentifier = hash
issuerAltName = issuer:copy
authorityKeyIdentifier = keyid:always,issuer:always