Added option to generate EKU in a certificate for users

GENI-NSF · Sep 27, 2018 · 704c2bf · 704c2bf
1 parent 07044df
commit 704c2bf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tools/cert_utils.py b/tools/cert_utils.py
@@ -174,6 +174,7 @@ def make_cert(uuid, email, urn, signer_cert_file, signer_key_file, csr_file,
     extdata_template = "[ %s ]\n" + \
         "subjectKeyIdentifier=hash\n" + \
         "authorityKeyIdentifier=keyid:always,issuer:always\n" + \
+        "extendedKeyUsage=serverAuth, clientAuth, timeStamping, codeSigning, emailProtection\n" + \
         "basicConstraints = CA:false\n"
     extdata = extdata_template % extname