diff --git a/roles/rproxy/templates/server.cnf.j2 b/roles/rproxy/templates/server.cnf.j2 index 35f860b..cf0a421 100644 --- a/roles/rproxy/templates/server.cnf.j2 +++ b/roles/rproxy/templates/server.cnf.j2 @@ -1,7 +1,8 @@ +[ req ] prompt = no days = 365 distinguished_name = {{ rproxy_service_name }}.{{ domain.stdout }} -x509_extensions = v3_x509 +req_extensions = v3_req [ {{ rproxy_service_name }}.{{ domain.stdout }} ] @@ -13,9 +14,9 @@ organizationalUnitName = IT commonName = {{ rproxy_service_name }}.{{ domain.stdout }} emailAddress = admin@{{ domain.stdout }} -[ v3_x509 ] +[ v3_req ] basicConstraints = CA:false -extendedKeyUsage = serverAuth +keyUsage = digitalSignature, keyEncipherment subjectAltName = @sans [ sans ]