From 57612c69fe58463035199c6344c994d612a07fab Mon Sep 17 00:00:00 2001
From: Mike Reeves <mike.reeves@securityonionsolutions.com>
Date: Mon, 20 Nov 2023 15:11:50 -0500
Subject: [PATCH] Update signing_policies.conf

---
 salt/ca/files/signing_policies.conf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/ca/files/signing_policies.conf b/salt/ca/files/signing_policies.conf
index 8310257fb..aa99b602a 100644
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -36,8 +36,8 @@ x509_signing_policies:
     - C: US
     - ST: Utah
     - L: Salt Lake City
-    - basicConstraints: "critical CA:false digitalSignature"
-    - keyUsage: "critical keyEncipherment"
+    - basicConstraints: "critical CA:false"
+    - keyUsage: "critical keyEncipherment digitalSignature"
     - subjectKeyIdentifier: hash
     - authorityKeyIdentifier: keyid,issuer:always
     - extendedKeyUsage: serverAuth