Add missing KeyUsages for default generated certificate

dtomcej · traefiker · commit 9299c3abc753 · 2019-08-12T00:36:04.000-07:00
diff --git a/pkg/tls/generate/generate.go b/pkg/tls/generate/generate.go
@@ -85,7 +85,7 @@ func derCert(privKey *rsa.PrivateKey, expiration time.Time, domain string) ([]by
 		NotBefore: time.Now(),
 		NotAfter:  expiration,
 
-		KeyUsage:              x509.KeyUsageKeyEncipherment,
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageKeyAgreement | x509.KeyUsageDataEncipherment,
 		BasicConstraintsValid: true,
 		DNSNames:              []string{domain},
 	}

Original file line number	Diff line number	Diff line change
`@@ -85,7 +85,7 @@ func derCert(privKey *rsa.PrivateKey, expiration time.Time, domain string) ([]by`
`85`	`85`	`NotBefore: time.Now(),`
`86`	`86`	`NotAfter: expiration,`
`87`	`87`
`88`		`- KeyUsage: x509.KeyUsageKeyEncipherment,`
	`88`	`+ KeyUsage: x509.KeyUsageKeyEncipherment \| x509.KeyUsageDigitalSignature \| x509.KeyUsageKeyAgreement \| x509.KeyUsageDataEncipherment,`
`89`	`89`	`BasicConstraintsValid: true,`
`90`	`90`	`DNSNames: []string{domain},`
`91`	`91`	`}`