Add support for client certificates with -client

Fixes #125
Closes #89
This commit is contained in:
John Downey
2019-02-02 15:44:12 -05:00
committed by Filippo Valsorda
parent 5bb0c47df7
commit 66af5a51f6
3 changed files with 12 additions and 2 deletions

View File

@@ -76,6 +76,9 @@ func (m *mkcert) makeCert(hosts []string) {
tpl.DNSNames = append(tpl.DNSNames, h)
}
}
if m.client {
tpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}
}
// IIS (the main target of PKCS #12 files), only shows the deprecated
// Common Name in the UI. See issue #115.