From 3870e3cb95345098b30503333666b3317df90ecd Mon Sep 17 00:00:00 2001
From: Mike Reeves <luke@geekempire.com>
Date: Tue, 17 Jul 2018 12:52:04 -0400
Subject: [PATCH] SSL Module - It's Working

---
 salt/ca/files/signing_policies.conf | 2 --
 salt/ssl/init.sls                   | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 2837baf91..1e7998be6 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -8,8 +8,6 @@ x509_signing_policies:
     - L: Salt Lake City
     - basicConstraints: "critical CA:false"
     - keyUsage: "digitalSignature, nonRepudiation"
-    - extendedkeyUsage: "serverAuth, clientAuth"
-    - keyUsage: "critical keyEncipherment"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always
     - days_valid: 3000
diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 12dac65b5..bfe009258 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -62,7 +62,7 @@ fbcrtlink:
         backup: True
 
 {% endif %}
-{% if grains['role'] == 'so-sensor' %}
+{% if grains['role'] == 'so-SENSOR' %}
 # Request a cert and drop it where it needs to go to be distributed
 /opt/so/conf/filebeat/etc/pki/filebeat.crt:
   x509.certificate_managed: