From 1da23b8173258779b8e0058a682c2f31ab63eb6c Mon Sep 17 00:00:00 2001
From: Felix Fontein <felix@fontein.de>
Date: Fri, 11 Apr 2025 14:02:18 +0200
Subject: [PATCH] Add more properties.

---
 .../targets/generic_connection_tests/tasks/main.yml   | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/tests/integration/targets/generic_connection_tests/tasks/main.yml b/tests/integration/targets/generic_connection_tests/tasks/main.yml
index d4ca25b3..63600e62 100644
--- a/tests/integration/targets/generic_connection_tests/tasks/main.yml
+++ b/tests/integration/targets/generic_connection_tests/tasks/main.yml
@@ -75,8 +75,15 @@
           commonName: Ansible test CA for Docker HTTPS connection tests
         useCommonNameForSAN: false
         basic_constraints:
-        - 'CA:TRUE'
+          - 'CA:TRUE'
         basic_constraints_critical: true
+        key_usage:
+          - digitalSignature
+          - Certificate Sign
+        key_usage_critical: true
+        extended_key_usage:
+          - serverAuth  # the same as "TLS Web Server Authentication"
+        extended_key_usage_critical: true
 
     - name: Create CA certificate
       community.crypto.x509_certificate:
@@ -90,7 +97,7 @@
         path: '{{ remote_tmp_dir }}/cert.csr'
         privatekey_path: '{{ remote_tmp_dir }}/cert.key'
         subject_alt_name:
-        - DNS:daemon-tls.ansible.com
+          - DNS:daemon-tls.ansible.com
         subject_alt_name_critical: true
 
     - name: Create frontend certificate