Set EKU on TLD CA

Refs namecoin#5
JeremyRand · Feb 17, 2021 · 24813e7 · 24813e7
1 parent ad9434a
commit 24813e7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/generate_tld_ca.go b/generate_tld_ca.go
@@ -100,7 +100,7 @@ func GenerateTLDCA(domain string, parentDERBytes []byte, parentPrivateKey interf
 		IsCA: true,
 		//KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
 		KeyUsage: x509.KeyUsageCertSign,
-		//ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		BasicConstraintsValid: true,
 
 		PermittedDNSDomainsCritical: true,