drop the critical bit on some X509 extensions

0bce6d0c · ale · f4abbe60 · 0bce6d0c
Commit 0bce6d0c authored Mar 13, 2014 by ale
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

autoca/ca.py autoca/ca.py +2 -2

No files found.
--- a/autoca/ca.py
+++ b/autoca/ca.py
@@ -74,9 +74,9 @@ class CA(object):
            crypto.X509Extension('keyUsage', True,
                                 '%sdigitalSignature, keyEncipherment' % (
                    server and '' or 'nonRepudiation, ')),
-            crypto.X509Extension('extendedKeyUsage', True,
+            crypto.X509Extension('extendedKeyUsage', False,
                                 server and 'serverAuth' or 'clientAuth'),
-            crypto.X509Extension('nsCertType', True,
+            crypto.X509Extension('nsCertType', False,
                                 server and 'server' or 'client'),
            ]
        cert = certutil.sign_certificate(