X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;ds=sidebyside;f=etc%2Fopenssl%2Fburettes.heureux-cyclage.org%2Fhost.cfg;h=e7037af2205fcb5d48cba15255d3a05387a68f97;hb=314cac6478df17a2fb35cf49577f088b4ed98e9d;hp=f2ef76584ed86568476cf4924285e9d60666c758;hpb=617ae234abe407638c2232da4a2d842a1c7583d6;p=lhc%2Fateliers.git

diff --git a/etc/openssl/burettes.heureux-cyclage.org/host.cfg b/etc/openssl/burettes.heureux-cyclage.org/host.cfg
index f2ef765..e7037af 100644
--- a/etc/openssl/burettes.heureux-cyclage.org/host.cfg
+++ b/etc/openssl/burettes.heureux-cyclage.org/host.cfg
@@ -25,8 +25,8 @@
 	jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
 	jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-	basicConstraints       = critical,CA:TRUE,pathlen:0
-	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = keyEncipherment
 	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:*.burettes.heureux-cyclage.org,DNS:burette.cyclocoop.heureux-cyclage.org,DNS:*.burette.cyclocoop.heureux-cyclage.org,DNS:burette.cyclocoop.org,DNS:*.burette.cyclocoop.org,DNS:burette.velosenville.org,DNS:burette.ptitvelo.net,DNS:burette.atelierdynamo.fr
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy