diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2014-09-12 20:59:39 +0200 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:53:17 +0200 |
| commit | 3ff1e540bf170acabd9d5580b4d10acab543acda (patch) | |
| tree | 60136c3f34f8ef899acfca20c86609bcb7f33104 /roles/common-LDAP | |
| parent | 6ea8ec0514fdf4d237651914b5189d5cfedafc42 (diff) | |
Key usage 'keyCertSign' is required for self-signed certificates.
Diffstat (limited to 'roles/common-LDAP')
| -rw-r--r-- | roles/common-LDAP/tasks/main.yml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/roles/common-LDAP/tasks/main.yml b/roles/common-LDAP/tasks/main.yml index e86fa45..60ccc76 100644 --- a/roles/common-LDAP/tasks/main.yml +++ b/roles/common-LDAP/tasks/main.yml @@ -43,7 +43,7 @@ --pubkey=/etc/ldap/ssl/{{ item.name }}.pem --privkey=/etc/ldap/ssl/{{ item.name }}.key --ou=LDAP {{ item.ou }} --cn={{ item.name }} - --usage=digitalSignature,keyEncipherment + --usage=digitalSignature,keyEncipherment,keyCertSign -t rsa -b 4096 -h sha256 --chown="root:openldap" --chmod=0640 register: r2 |