Commit a0f28b37 authored by ale's avatar ale

add clientAuth extendedKeyUsage to server certs

parent c378f69c
......@@ -85,7 +85,7 @@ class CA(object):
'%sdigitalSignature, keyEncipherment' % (
server and '' or 'nonRepudiation, ')),
crypto.X509Extension('extendedKeyUsage', False,
server and 'serverAuth' or 'clientAuth'),
server and 'clientAuth, serverAuth' or 'clientAuth'),
crypto.X509Extension('nsCertType', False,
server and 'client, server' or 'client'),
]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment