X-Git-Url: http://git.cyclocoop.org/?a=blobdiff_plain;f=etc%2Fopenssl%2Fstats.heureux-cyclage.org%2Fhost.cfg;h=0cbab4e6b0830dc012fcb8d5f6323c0ee8d4556c;hb=837755eea02c6cc52153764f229f6f4965af5de9;hp=8e676cd8f28eac7107471aaa869d0df124597ca0;hpb=eaef4f8f178a8a7c6b6984dc9b40d29becbd996a;p=lhc%2Fateliers.git

diff --git a/etc/openssl/stats.heureux-cyclage.org/host.cfg b/etc/openssl/stats.heureux-cyclage.org/host.cfg
index 8e676cd..0cbab4e 100644
--- a/etc/openssl/stats.heureux-cyclage.org/host.cfg
+++ b/etc/openssl/stats.heureux-cyclage.org/host.cfg
@@ -1,4 +1,4 @@
-	SERVICE     = www
+	SERVICE     = stats
 	RANDFILE    = var/sec/x509/openssl.rand
 	oid_section = extra_oids
 [ extra_oids ]
@@ -25,9 +25,9 @@
 	jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
 	jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-	basicConstraints       = critical,CA:TRUE,pathlen:0
-	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = keyEncipherment
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy
 	authorityKeyIdentifier = keyid:always,issuer:always
@@ -37,7 +37,7 @@
 [ self_signed_extensions ]
 	basicConstraints       = critical,CA:TRUE,pathlen:0
 	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy
 	authorityKeyIdentifier = keyid:always,issuer:always