Fixes #17043: Align agent certificate on the one used by windows agents

Normation · Apr 3, 2020 · 3aa500b · 3aa500b
1 parent 05ab826
commit 3aa500b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rudder-agent/SOURCES/openssl.cnf b/rudder-agent/SOURCES/openssl.cnf
@@ -18,8 +18,8 @@ distinguished_name = req_distinguished_name
 
 [ agent_cert ]
 # subject = /CN=hostname/UID=uuid
-basicConstraints        = CA:FALSE
+basicConstraints        = CA:TRUE
 subjectKeyIdentifier    = hash
 authorityKeyIdentifier  = keyid:always, issuer:always
-keyUsage                = digitalSignature, dataEncipherment, keyEncipherment, keyAgreement 
+keyUsage                = digitalSignature, dataEncipherment, keyEncipherment, keyAgreement, keyCertSign
 #extendedKeyUsage        = clientAuth