certifix

commit f3960c6b76f5d97b4a2388fd4791b573c4faeb79
parent cb84c20e734f8992d769380f12af33647d186e66
Author: Daniel Barlow <dan@telent.net>
Date:   Fri,  4 Oct 2024 23:05:48 +0100

add basicConstraints

Diffstat:
M
main.fnl
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/main.fnl b/main.fnl
@@ -6,6 +6,7 @@
 (local ctx (require :openssl.ssl.context))
 (local csr (require :openssl.x509.csr))
 (local x509 (require :openssl.x509))
+(local extension (require :openssl.x509.extension))
 (local pkey (require :openssl.pkey))
 (local bignum (require :openssl.bignum))
 
@@ -93,7 +94,9 @@
     (for [i 1 (csr:getRequestedExtensionCount) 1]
       (let [ext (csr:getRequestedExtension i)]
         (crt:addExtension ext)))
-    (doto crt (: :sign ca-key))))
+    (doto crt
+      (: :addExtension (extension.new "basicConstraints" "critical,CA:FALSE"))
+      (: :sign ca-key))))
 
 (fn approve-request? [csr]
   (let [challengePassword (csr:getAttribute :challengePassword)]