Commit a0f28b37 authored by ale's avatar ale
Browse files

add clientAuth extendedKeyUsage to server certs

parent c378f69c
...@@ -85,7 +85,7 @@ class CA(object): ...@@ -85,7 +85,7 @@ class CA(object):
'%sdigitalSignature, keyEncipherment' % ( '%sdigitalSignature, keyEncipherment' % (
server and '' or 'nonRepudiation, ')), server and '' or 'nonRepudiation, ')),
crypto.X509Extension('extendedKeyUsage', False, crypto.X509Extension('extendedKeyUsage', False,
server and 'serverAuth' or 'clientAuth'), server and 'clientAuth, serverAuth' or 'clientAuth'),
crypto.X509Extension('nsCertType', False, crypto.X509Extension('nsCertType', False,
server and 'client, server' or 'client'), server and 'client, server' or 'client'),
] ]
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment