From: elijah <elijah@riseup.net>
Date: Thu, 13 Dec 2012 22:03:44 +0000 (-0800)
Subject: client certs should only have digitalSignature
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=9e06d816ae428fb0fdaa858dd350777627997cba;p=leap%2Fleap_cli.git

client certs should only have digitalSignature
---

diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb
index 63749ca..779fa30 100644
--- a/lib/leap_cli/commands/ca.rb
+++ b/lib/leap_cli/commands/ca.rb
@@ -337,7 +337,7 @@ module LeapCli; module Commands
       "digest" => "SHA256",
       "extensions" => {
         "keyUsage" => {
-          "usage" => ["digitalSignature", "keyEncipherment"]
+          "usage" => ["digitalSignature"]
         },
         "extendedKeyUsage" => {
           "usage" => ["clientAuth"]