Correction : X.509 Key Usage.

[lhc/ateliers.git] / etc / openssl / roundcube.heureux-cyclage.org / host.cfg

diff --git a/etc/openssl/roundcube.heureux-cyclage.org/host.cfg b/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
index e275b0b..5c6a146 100644 (file)
--- a/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
+++ b/etc/openssl/roundcube.heureux-cyclage.org/host.cfg
@@ -25,8 +25,8 @@
        jurisdictionOfIncorporationStateOrProvinceName = $ENV::x509_state_or_province
        jurisdictionOfIncorporationCountryName         = $ENV::x509_country
 [ extensions ]
-       basicConstraints       = critical,CA:TRUE,pathlen:0
-       keyUsage               = keyCertSign,cRLSign,digitalSignature,keyEncipherment
+       basicConstraints       = critical,CA:FALSE,pathlen:0
+       keyUsage               = keyEncipherment
        subjectAltName         = email:contact+$SERVICE@$ENV::x509_host,DNS:mail.$ENV::x509_host,DNS:courriel.$ENV::x509_host,DNS:$SERVICE.cyclocoop.org,DNS:mail.cyclocoop.org,DNS:courriel.cyclocoop.org,DNS:$SERVICE.ptitvelo.net,DNS:mail.ptitvelo.net,DNS:courriel.ptitvelo.net
        subjectKeyIdentifier   = hash
        issuerAltName          = issuer:copy