From 8920e20cf7e5f72a4abefeb7791343ba03b499e8 Mon Sep 17 00:00:00 2001
From: Oliver Gugger <gugger@gmail.com>
Date: Fri, 17 Apr 2020 09:22:32 +0200
Subject: [PATCH] cert: define ExtendedKeyUsage as required by macOS 10.15

---
 cert/selfsigned.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cert/selfsigned.go b/cert/selfsigned.go
index f67e8cd8..244d64b7 100644
--- a/cert/selfsigned.go
+++ b/cert/selfsigned.go
@@ -228,6 +228,7 @@ func GenCertPair(org, certFile, keyFile string, tlsExtraIPs,
 
 		KeyUsage: x509.KeyUsageKeyEncipherment |
 			x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
+		ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		IsCA:                  true, // so can sign self.
 		BasicConstraintsValid: true,