aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rwxr-xr-xdmvpn-ca12
1 files changed, 12 insertions, 0 deletions
diff --git a/dmvpn-ca b/dmvpn-ca
index 0b01bf1..610e8d4 100755
--- a/dmvpn-ca
+++ b/dmvpn-ca
@@ -292,6 +292,18 @@ function issue_cert(attrs, func)
)
)
+ if ca then
+ cert:addExtension(
+ x509ext.new(
+ 'keyUsage',
+ 'DER',
+ rfc5280.KeyUsage.encode{
+ ['keyCertSign']=true, ['cRLSign']=true
+ }
+ )
+ )
+ end
+
local crl_dp = config.crl['dist-point']
if crl_dp then
cert:addExtension(