certifix

commit b1e869e12515c6d1b91634ebda6ee214b345f714
parent 4942285f6d0a2add7e511be6f5b8a86bc081074a
Author: Daniel Barlow <dan@telent.net>
Date:   Fri,  4 Oct 2024 23:20:20 +0100

add key usage/extended key usage extensions

Diffstat:
M
main.fnl
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/main.fnl b/main.fnl
@@ -98,8 +98,11 @@
     (for [i 1 (csr:getRequestedExtensionCount) 1]
       (let [ext (csr:getRequestedExtension i)]
         (crt:addExtension ext)))
+    ;; https://www.golinuxcloud.com/add-x509-extensions-to-certificate-openssl/
     (doto crt
       (: :addExtension (extension.new "basicConstraints" "critical,CA:FALSE"))
+      (: :addExtension (extension.new "keyUsage" "digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment")) ;; all of these?
+      (: :addExtension (extension.new "extendedKeyUsage" "clientAuth"))
       (: :sign ca-key))))
 
 (fn approve-request? [csr]