summaryrefslogtreecommitdiffstats
path: root/roles/common-LDAP/tasks
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2014-09-12 20:59:39 +0200
committerGuilhem Moulin <guilhem@fripost.org>2015-06-07 02:53:17 +0200
commit3ff1e540bf170acabd9d5580b4d10acab543acda (patch)
tree60136c3f34f8ef899acfca20c86609bcb7f33104 /roles/common-LDAP/tasks
parent6ea8ec0514fdf4d237651914b5189d5cfedafc42 (diff)
Key usage 'keyCertSign' is required for self-signed certificates.
Diffstat (limited to 'roles/common-LDAP/tasks')
-rw-r--r--roles/common-LDAP/tasks/main.yml2
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/common-LDAP/tasks/main.yml b/roles/common-LDAP/tasks/main.yml
index e86fa45..60ccc76 100644
--- a/roles/common-LDAP/tasks/main.yml
+++ b/roles/common-LDAP/tasks/main.yml
@@ -43,7 +43,7 @@
--pubkey=/etc/ldap/ssl/{{ item.name }}.pem
--privkey=/etc/ldap/ssl/{{ item.name }}.key
--ou=LDAP {{ item.ou }} --cn={{ item.name }}
- --usage=digitalSignature,keyEncipherment
+ --usage=digitalSignature,keyEncipherment,keyCertSign
-t rsa -b 4096 -h sha256
--chown="root:openldap" --chmod=0640
register: r2