X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=etc%2Fopenssl%2Froundcube.heureux-cyclage.org%2Fhost.cfg;h=5c6a146d9ea80b4e39e58208d589bc44f75d8f35;hb=a31174bc0d3a7aafb7c0f71b200a97437fbddae3;hp=3b54e5b5e080deb30d800ed8de73d9c5f595b10d;hpb=b75d4503ef9c919231c0c02daf5a1ed1e57c73af;p=lhc%2Fateliers.git

diff --git a/etc/openssl/roundcube.heureux-cyclage.org/host.cfg b/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
index 3b54e5b..5c6a146 100644
--- a/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
+++ b/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
@@ -25,9 +25,9 @@
 	jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
 	jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-	basicConstraints       = critical,CA:TRUE,pathlen:0
-	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org
+	basicConstraints       = critical,CA:FALSE,pathlen:0
+	keyUsage               = keyEncipherment
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org,DNS:$SERVICE.ptitvelo.net,DNS:mail.ptitvelo.net,DNS:courriel.ptitvelo.net
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy
 	authorityKeyIdentifier = keyid:always,issuer:always
@@ -37,7 +37,7 @@
 [ self_signed_extensions ]
 	basicConstraints       = critical,CA:TRUE,pathlen:0
 	keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
-	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org
+	subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org,DNS:$SERVICE.ptitvelo.net,DNS:mail.ptitvelo.net,DNS:courriel.ptitvelo.net
 	subjectKeyIdentifier   = hash
 	issuerAltName          = issuer:copy
 	authorityKeyIdentifier = keyid:always,issuer:always