Merge pull request #4209 from guggero/tls-ext-key-usage

cert: define ExtendedKeyUsage as required by macOS 10.15/iOS 13.
This commit is contained in:
Olaoluwa Osuntokun 2020-04-20 14:14:43 -07:00 committed by GitHub
commit e4d10fa149
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -228,6 +228,7 @@ func GenCertPair(org, certFile, keyFile string, tlsExtraIPs,
KeyUsage: x509.KeyUsageKeyEncipherment |
x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
IsCA: true, // so can sign self.
BasicConstraintsValid: true,