letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix RA test.

This commit is contained in:
Jacob Hoffman-Andrews 2015-06-05 08:24:56 -07:00
parent 625eab5ad3
commit 1e036549cb
3 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/objects.go
View File

@ -419,7 +419,7 @@ func (cert Certificate) MatchesCSR(csr *x509.CertificateRequest, earliestExpiry
err = InternalServerError("Generated certificate can sign other certificates")
return
}
if !cmpExtKeyUsageSlice(parsedCertificate.ExtKeyUsage, []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}) {
if !cmpExtKeyUsageSlice(parsedCertificate.ExtKeyUsage, []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}) {
err = InternalServerError("Generated certificate doesn't have correct key usage extensions")
return
}

3
test/boulder-config.json
View File

@ -53,7 +53,8 @@
"usages": [
"digital signature",
"key encipherment",
"server auth"
"server auth",
"client auth"
],
"backdate": "1h",
"is_ca": false,

3
test/boulder-test-config.json
View File

@ -53,7 +53,8 @@
"usages": [
"digital signature",
"key encipherment",
"server auth"
"server auth",
"client auth"
],
"backdate": "1h",
"is_ca": false,