From 06261b0b9a63d7b57072d577e406a87420e0501b Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Mon, 21 Oct 2019 17:54:09 -0400
Subject: [PATCH] SSL Issue 79 - Add extended type to all certs

---
 salt/ca/files/signing_policies.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 379cc514d..b0dd33868 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -36,6 +36,7 @@ x509_signing_policies:
     - keyUsage: "critical keyEncipherment"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always
+    - extendedKeyUsage: serverAuth
     - days_valid: 820
     - copypath: /etc/pki/issued_certs/
   influxdb: