aipper/mkcert
1
0
Fork 0
mirror of https://github.com/FiloSottile/mkcert.git synced 2025-10-13 16:31:41 +08:00
Code Issues Packages Projects Releases Wiki Activity

Drop codeSigning EKU from certificates with email SANs

Browse Source 
Unclear how those are correlated.
If it breaks something we can put it back.

Fixes #303
This commit is contained in:
Filippo Valsorda
2020-10-27 12:25:23 +01:00
parent c12e24244a
commit 9f583c670f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cert.go
View File

@@ -93,7 +93,7 @@ func (m *mkcert) makeCert(hosts []string) {
tpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
}
if len(tpl.EmailAddresses) > 0 {
tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageCodeSigning, x509.ExtKeyUsageEmailProtection)
tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageEmailProtection)
}
// IIS (the main target of PKCS #12 files), only shows the deprecated