Thanks,

I changed my strategy :
one file programmatically modified and added to the site-enabled folder

like that everything runs fine and I keep being able to meet my requirement of one root ca per client.

Many thanks all of you

Bye