Correction : X.509 Key Usage.

[lhc/ateliers.git] / etc / openssl / stats.heureux-cyclage.org / host.cfg

diff --git a/etc/openssl/stats.heureux-cyclage.org/host.cfg b/etc/openssl/stats.heureux-cyclage.org/host.cfg
index 59cadce..7802f77 100644 (file)
--- a/etc/openssl/stats.heureux-cyclage.org/host.cfg
+++ b/etc/openssl/stats.heureux-cyclage.org/host.cfg
@@ -18,16 +18,16 @@
        stateOrProvinceName    = $ENV::x509_state_or_province
        localityName           = $ENV::x509_state_or_province
        0.organizationName     = $ENV::x509_organization
-       organizationalUnitName = Service Web
+       organizationalUnitName = Service de statistiques
        commonName             = $SERVICE.$ENV::x509_host
        businessCategory                               = $ENV::x509_business_category
        jurisdictionOfIncorporationLocalityName        = $ENV::x509_state_or_province
        jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
        jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-       basicConstraints       = critical,CA:TRUE,pathlen:0
-       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+       basicConstraints       = critical,CA:FALSE,pathlen:0
+       keyUsage               = keyEncipherment
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
        subjectKeyIdentifier   = hash
        issuerAltName          = issuer:copy
        authorityKeyIdentifier = keyid:always,issuer:always
@@ -37,7 +37,7 @@
 [ self_signed_extensions ]
        basicConstraints       = critical,CA:TRUE,pathlen:0
        keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host,DNS:$ENV::x509_host
+       subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:$SERVICE.$ENV::x509_host
        subjectKeyIdentifier   = hash
        issuerAltName          = issuer:copy
        authorityKeyIdentifier = keyid:always,issuer:always