Allow Default Certificate to work on macOS 10.15

2019-10-25 10:08:05 -05:00 · 2019-10-25 10:08:05 -05:00 · 4990f6c22d
parent d447a50b73
commit 4990f6c22d
1 changed files with 1 additions and 0 deletions
--- a/pkg/tls/generate/generate.go
+++ b/pkg/tls/generate/generate.go
@ -86,6 +86,7 @@ func derCert(privKey *rsa.PrivateKey, expiration time.Time, domain string) ([]by
 		NotAfter:  expiration,

 		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageKeyAgreement | x509.KeyUsageDataEncipherment,
+		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		BasicConstraintsValid: true,
 		DNSNames:              []string{domain},
 	}