PenaDevops/mkcert
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Drop codeSigning EKU from certificates with email SANs

Browse Source 
Unclear how those are correlated.
If it breaks something we can put it back.

Fixes #303
This commit is contained in:
Filippo Valsorda 2020-10-27 12:25:23 +01:00
parent c12e24244a
commit 9f583c670f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cert.go
View File

@ -93,7 +93,7 @@ func (m *mkcert) makeCert(hosts []string) {
tpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
}
if len(tpl.EmailAddresses) > 0 {
tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageCodeSigning, x509.ExtKeyUsageEmailProtection)
tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageEmailProtection)
}
// IIS (the main target of PKCS #12 files), only shows the deprecated