Commit 0bce6d0c authored by ale's avatar ale

drop the critical bit on some X509 extensions

parent f4abbe60
...@@ -74,9 +74,9 @@ class CA(object): ...@@ -74,9 +74,9 @@ class CA(object):
crypto.X509Extension('keyUsage', True, crypto.X509Extension('keyUsage', True,
'%sdigitalSignature, keyEncipherment' % ( '%sdigitalSignature, keyEncipherment' % (
server and '' or 'nonRepudiation, ')), server and '' or 'nonRepudiation, ')),
crypto.X509Extension('extendedKeyUsage', True, crypto.X509Extension('extendedKeyUsage', False,
server and 'serverAuth' or 'clientAuth'), server and 'serverAuth' or 'clientAuth'),
crypto.X509Extension('nsCertType', True, crypto.X509Extension('nsCertType', False,
server and 'server' or 'client'), server and 'server' or 'client'),
] ]
cert = certutil.sign_certificate( cert = certutil.sign_certificate(
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment