chaos/salt-master
Archived
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

keyUsage and intca for all

Browse Source
This commit is contained in:
do
2021-02-12 19:19:23 +01:00
parent 7a01441744
commit 7ec3a3739d
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
base/pki/host.sls
View File

@@ -38,6 +38,7 @@
- append - append
- sources: - sources:
- /etc/pki/{{ cn }}.crt - /etc/pki/{{ cn }}.crt
- /etc/pki/intca.crt
- /etc/pki/private.key - /etc/pki/private.key
- require: - require:
- file: /etc/pki/chain - file: /etc/pki/chain

4
base/pki/signing_policies.conf
View File

@@ -11,8 +11,8 @@ x509_signing_policies:
- ST: Berlin - ST: Berlin
- L: Berlin - L: Berlin
- basicConstraints: "critical CA:false" - basicConstraints: "critical CA:false"
- keyUsage: "critical keyEncipherment" - keyUsage: "nonRepudiation, digitalSignature, keyEncipherment"
- subjectKeyIdentifier: hash - subjectKeyIdentifier: hash
- authorityKeyIdentifier: keyid,issuer:always - authorityKeyIdentifier: keyid,issuer:always
- days_valid: 360 - days_valid: 365
- copypath: /etc/pki/issued_certs/ - copypath: /etc/pki/issued_certs/