Merge pull request #4209 from guggero/tls-ext-key-usage

cert: define ExtendedKeyUsage as required by macOS 10.15/iOS 13.
This commit is contained in:
Olaoluwa Osuntokun
2020-04-20 14:14:43 -07:00
committed by GitHub

View File

@@ -228,6 +228,7 @@ func GenCertPair(org, certFile, keyFile string, tlsExtraIPs,
KeyUsage: x509.KeyUsageKeyEncipherment |
x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
IsCA: true, // so can sign self.
BasicConstraintsValid: true,