distribute intca to /etc/ssl/certs also

2021-02-16 17:05:41 +01:00
parent 7ec3a3739d
commit f60cbb6117
2 changed files with 13 additions and 1 deletions
--- a/base/pki/signing_policies.conf
+++ b/base/pki/signing_policies.conf
@@ -11,7 +11,8 @@ x509_signing_policies:
    - ST: Berlin
    - L: Berlin
    - basicConstraints: "critical CA:false"
-    - keyUsage: "nonRepudiation, digitalSignature, keyEncipherment"
+    - keyUsage: "nonRepudiation, digitalSignature, keyEncipherment, keyAgreement"
+    - extendedKeyUsage: "serverAuth, clientAuth"
    - subjectKeyIdentifier: hash
    - authorityKeyIdentifier: keyid,issuer:always
    - days_valid: 365