Commit 0bce6d0c authored by ale's avatar ale

drop the critical bit on some X509 extensions

parent f4abbe60
......@@ -74,9 +74,9 @@ class CA(object):
crypto.X509Extension('keyUsage', True,
'%sdigitalSignature, keyEncipherment' % (
server and '' or 'nonRepudiation, ')),
crypto.X509Extension('extendedKeyUsage', True,
crypto.X509Extension('extendedKeyUsage', False,
server and 'serverAuth' or 'clientAuth'),
crypto.X509Extension('nsCertType', True,
crypto.X509Extension('nsCertType', False,
server and 'server' or 'client'),
]
cert = certutil.sign_certificate(
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment