X-Git-Url: http://git.cyclocoop.org/?p=lhc%2Fateliers.git;a=blobdiff_plain;f=etc%2Fopenssl%2Fwww.cyclocoop.org%2Fhost.cfg;h=ffc139387d0f70fb745e71fb8d79f72402f57806;hp=9c92c9e0a8be4dd3251d4811173d03ac9e1a91ab;hb=a31174bc0d3a7aafb7c0f71b200a97437fbddae3;hpb=c38e6b3f45945499195ffaa672989cbdc8780006

diff --git a/etc/openssl/www.cyclocoop.org/host.cfg b/etc/openssl/www.cyclocoop.org/host.cfg
index 9c92c9e..ffc1393 100644
--- a/etc/openssl/www.cyclocoop.org/host.cfg
+++ b/etc/openssl/www.cyclocoop.org/host.cfg
@@ -25,8 +25,8 @@
 	jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
 	jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-	basicConstraints       = critical,CA:TRUE,pathlen:0
-	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = keyEncipherment
 	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host,DNS:cyclocoop.heureux-cyclage.org
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy