roles/rproxy/templates/server.cnf.j2

@@ -1,7 +1,8 @@
+[ req ]
 prompt                 = no
 days                   = 365
 distinguished_name     = {{ rproxy_service_name }}.{{ domain.stdout }}
-x509_extensions         = v3_x509
+req_extensions         = v3_req
 
 
 [ {{  rproxy_service_name  }}.{{ domain.stdout }} ]
@@ -13,9 +14,9 @@ organizationalUnitName = IT
 commonName             = {{ rproxy_service_name }}.{{ domain.stdout }}
 emailAddress           = admin@{{ domain.stdout }}
 
-[ v3_x509 ]
+[ v3_req ]
 basicConstraints       = CA:false
-extendedKeyUsage       = serverAuth
+keyUsage               = digitalSignature, keyEncipherment
 subjectAltName         = @sans
 
 [ sans ]