Sign In
golang
/
mkcert
1
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Browse Source

Drop codeSigning EKU from certificates with email SANs

Unclear how those are correlated.
If it breaks something we can put it back.

Fixes #303
Filippo Valsorda 4 years ago
parent
c12e24244a
commit
9f583c670f
1 changed files with 1 additions and 1 deletions
Split View Show Diff Stats
  1. 1 1
      cert.go

+ 1 - 1
cert.go
View File 

@@ -93,7 +93,7 @@ func (m *mkcert) makeCert(hosts []string) {
 
 		tpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
 
 	}
 
 	if len(tpl.EmailAddresses) > 0 {
 
-		tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageCodeSigning, x509.ExtKeyUsageEmailProtection)
 
+		tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageEmailProtection)
 
 	}
 
 
 	// IIS (the main target of PKCS #12 files), only shows the deprecated