diff options
| author | Jonathan Gray <jsg@cvs.openbsd.org> | 2015-11-02 10:27:45 +0000 |
|---|---|---|
| committer | Jonathan Gray <jsg@cvs.openbsd.org> | 2015-11-02 10:27:45 +0000 |
| commit | 73b1bbb453ee03ef5fc031fd1ff6eba703c7468b (patch) | |
| tree | 8dcd1a91d9173f308d1a61ef92267a9b8a28dbfd /usr.sbin/ikectl/ikeca.c | |
| parent | 01f442b213135479fdc96283464eae7b08d3dc34 (diff) | |
Accept an ocsp option when creating certificates to set the extended
key usage for OCSP signing.
Requested by and ok reyk@
Diffstat (limited to 'usr.sbin/ikectl/ikeca.c')
| -rw-r--r-- | usr.sbin/ikectl/ikeca.c | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/usr.sbin/ikectl/ikeca.c b/usr.sbin/ikectl/ikeca.c index 8ecfd3e2d54..90ef087e5c3 100644 --- a/usr.sbin/ikectl/ikeca.c +++ b/usr.sbin/ikectl/ikeca.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ikeca.c,v 1.37 2015/08/19 21:07:23 reyk Exp $ */ +/* $OpenBSD: ikeca.c,v 1.38 2015/11/02 10:27:44 jsg Exp $ */ /* * Copyright (c) 2010 Jonathan Gray <jsg@openbsd.org> @@ -273,6 +273,11 @@ ca_certificate(struct ca *ca, char *keyname, int type, int action) ca_setenv("$ENV::CERTUSAGE", "digitalSignature,keyAgreement"); break; + case CA_OCSP: + ca_setenv("$ENV::EXTCERTUSAGE", "OCSPSigning"); + ca_setenv("$ENV::CERTUSAGE", + "nonRepudiation,digitalSignature,keyEncipherment"); + break; default: break; } |