X-Git-Url: https://git.cyclocoop.org/?p=lhc%2Fateliers.git;a=blobdiff_plain;f=etc%2Fopenssl%2Fservice%2Fsmtp.cfg;h=43abe70988cc2fcc0df1a35c7ab14f6089525b22;hp=6b9e733a884bf31854e3cfb54900181ca1587f15;hb=f59993b7864851b163d10764edc5b9d1d798b411;hpb=08bfdef225ec9d8d83a6658d64d462404be011a3 diff --git a/etc/openssl/service/smtp.cfg b/etc/openssl/service/smtp.cfg index 6b9e733..43abe70 100644 --- a/etc/openssl/service/smtp.cfg +++ b/etc/openssl/service/smtp.cfg @@ -32,8 +32,8 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/crt.pem - crlDistributionPoints = URI:http://www.$ENV::x509_host/tls/$SERVICE/crl.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem + crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem certificatePolicies = @service_certificate_policies [ service_self_signed_extensions ] basicConstraints = critical,CA:TRUE,pathlen:0 @@ -42,8 +42,8 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/$SERVICE/crt.pem - crlDistributionPoints = URI:http://www.$ENV::x509_host/tls/$SERVICE/crl.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem + crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem [ user_extensions ] basicConstraints = critical,CA:FALSE,pathlen:0 keyUsage = digitalSignature,keyEncipherment @@ -51,10 +51,10 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/$SERVICE/crt.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem [ service_certificate_policies ] policyIdentifier = 1.2.250.1.42 - CPS.1 = https://www.$ENV::x509_host/tls/cps + CPS.1 = https://www.$ENV::x509_host/x509/cps [ service_ca ] private_key = $HOME/var/sec/x509/service/$SERVICE/key.pem dir = $HOME/var/pub/x509/service/$SERVICE