add clientAuth extendedKeyUsage to server certs

a0f28b37 · ale · c378f69c · a0f28b37
Commit a0f28b37 authored Mar 14, 2014 by ale
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

autoca/ca.py autoca/ca.py +1 -1

No files found.
--- a/autoca/ca.py
+++ b/autoca/ca.py
@@ -85,7 +85,7 @@ class CA(object):
                                 '%sdigitalSignature, keyEncipherment' % (
                    server and '' or 'nonRepudiation, ')),
            crypto.X509Extension('extendedKeyUsage', False,
-                                 server and 'serverAuth' or 'clientAuth'),
+                                 server and 'clientAuth, serverAuth' or 'clientAuth'),
            crypto.X509Extension('nsCertType', False,
                                 server and 'client, server' or 'client'),
            ]