X-Git-Url: https://git.cyclocoop.org/?p=lhc%2Fateliers.git;a=blobdiff_plain;f=etc%2Fopenssl%2Fservice%2Fwww.cfg;h=356371a7d6279ccdf6e59f601e18800004c5dcb5;hp=a0f8921a95331cb1040677118d7c0a2175c18f48;hb=99a36d394e71f3ea03c530c1e6f33666e39039fc;hpb=5b3f6649997abf4786ec2b1292abf712d4358567 diff --git a/etc/openssl/service/www.cfg b/etc/openssl/service/www.cfg index a0f8921..356371a 100644 --- a/etc/openssl/service/www.cfg +++ b/etc/openssl/service/www.cfg @@ -32,8 +32,8 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/crt.pem - crlDistributionPoints = URI:http://www.$ENV::x509_host/tls/$SERVICE/crl.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/crt.pem + crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem certificatePolicies = @service_certificate_policies [ service_self_signed_extensions ] basicConstraints = critical,CA:TRUE,pathlen:0 @@ -42,8 +42,8 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/$SERVICE/crt.pem - crlDistributionPoints = URI:http://www.$ENV::x509_host/tls/$SERVICE/crl.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem + crlDistributionPoints = URI:http://www.$ENV::x509_host/x509/$SERVICE/crl.pem [ user_extensions ] basicConstraints = critical,CA:FALSE,pathlen:0 keyUsage = digitalSignature,keyEncipherment @@ -51,10 +51,10 @@ subjectKeyIdentifier = hash issuerAltName = issuer:copy authorityKeyIdentifier = keyid:always,issuer:always - authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/tls/$SERVICE/crt.pem + authorityInfoAccess = caIssuers;URI:http://www.$ENV::x509_host/x509/$SERVICE/crt.pem [ service_certificate_policies ] policyIdentifier = 1.2.250.1.42 - CPS.1 = https://www.$ENV::x509_host/tls/cps + CPS.1 = https://www.$ENV::x509_host/x509/cps [ service_ca ] private_key = $HOME/var/sec/x509/service/$SERVICE/key.pem dir = $HOME/var/pub/x509/service/$SERVICE