From 4dbb33af44564adec166f0536b5e51c58f7e0452 Mon Sep 17 00:00:00 2001
From: apavlov <apavlov@olsson.ul>
Date: Tue, 9 Jul 2024 22:07:30 +0300
Subject: [PATCH] keyUsage

---
 roles/rproxy/templates/server.cnf.j2 | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/roles/rproxy/templates/server.cnf.j2 b/roles/rproxy/templates/server.cnf.j2
index 35f860b..cf0a421 100644
--- a/roles/rproxy/templates/server.cnf.j2
+++ b/roles/rproxy/templates/server.cnf.j2
@@ -1,7 +1,8 @@
+[ req ]
 prompt                 = no
 days                   = 365
 distinguished_name     = {{ rproxy_service_name }}.{{ domain.stdout }}
-x509_extensions         = v3_x509
+req_extensions         = v3_req
 
 
 [ {{  rproxy_service_name  }}.{{ domain.stdout }} ]
@@ -13,9 +14,9 @@ organizationalUnitName = IT
 commonName             = {{ rproxy_service_name }}.{{ domain.stdout }}
 emailAddress           = admin@{{ domain.stdout }}
 
-[ v3_x509 ]
+[ v3_req ]
 basicConstraints       = CA:false
-extendedKeyUsage       = serverAuth
+keyUsage               = digitalSignature, keyEncipherment
 subjectAltName         = @sans
 
 [ sans ]