luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

Merge pull request #890 from ironSource/pki-fix 

fix CA compatibility with OpenSSL
This commit is contained in:
Jeff Mitchell 2015-12-29 12:04:03 -06:00
parent e43656c045 fba756075a
commit b85c29349f
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
builtin/logical/pki/cert_util.go
View File

@ -687,7 +687,11 @@ func addKeyUsages(creationInfo *creationBundle, certTemplate *x509.Certificate)
// Go performs validation not according to spec but according to the Windows
// Crypto API, so we add all usages to CA certs
certTemplate.KeyUsage = x509.KeyUsage(certTemplate.KeyUsage | x509.KeyUsageCertSign | x509.KeyUsageCRLSign)
certTemplate.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageAny}
certTemplate.ExtKeyUsage = []x509.ExtKeyUsage{
x509.ExtKeyUsageAny,
x509.ExtKeyUsageServerAuth,
x509.ExtKeyUsageClientAuth,
}
}
}