From 9299c3abc753f667636d5907795561babe284b4b Mon Sep 17 00:00:00 2001
From: Daniel Tomcej <daniel.tomcej@gmail.com>
Date: Mon, 5 Aug 2019 07:20:05 -0600
Subject: [PATCH] Add missing KeyUsages for default generated certificate

---
 pkg/tls/generate/generate.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/tls/generate/generate.go b/pkg/tls/generate/generate.go
index 91d73a731..fd0744ade 100644
--- a/pkg/tls/generate/generate.go
+++ b/pkg/tls/generate/generate.go
@@ -85,7 +85,7 @@ func derCert(privKey *rsa.PrivateKey, expiration time.Time, domain string) ([]by
 		NotBefore: time.Now(),
 		NotAfter:  expiration,
 
-		KeyUsage:              x509.KeyUsageKeyEncipherment,
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageKeyAgreement | x509.KeyUsageDataEncipherment,
 		BasicConstraintsValid: true,
 		DNSNames:              []string{domain},
 	}