From 4128a2ea4e1f74ac98b26fa15de898717926ccbc Mon Sep 17 00:00:00 2001
From: Mike Reeves <luke@geekempire.com>
Date: Tue, 17 Jul 2018 12:20:13 -0400
Subject: [PATCH] SSL Module - Change Cert Settings

---
 salt/ssl/init.sls | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls
index 7f235c6ee..7cf98ef37 100644
--- a/salt/ssl/init.sls
+++ b/salt/ssl/init.sls
@@ -72,6 +72,8 @@ fbcrtlink:
     - signing_policy: filebeat
     - public_key: /opt/so/conf/filebeat/etc/pki/filebeat.key
     - CN: {{ master }}
+    - keyUsage: "digitalSignature, nonRepudiation"
+    - extendedkeyUsage: "serverAuth, clientAuth"
     - days_remaining: 3000
     - backup: True
     - managed_private_key: