From 46f67f7da5ee935bf675038fb2a54f8ae9ad62a1 Mon Sep 17 00:00:00 2001 From: mmerrill3 Date: Mon, 16 Mar 2020 14:03:02 -0400 Subject: [PATCH] Adding client usage extension for server cert (#305) Signed-off-by: mmerrill3 --- pkg/tlsconfig/options.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/tlsconfig/options.go b/pkg/tlsconfig/options.go index 2598787e..4d73f593 100644 --- a/pkg/tlsconfig/options.go +++ b/pkg/tlsconfig/options.go @@ -48,7 +48,7 @@ func GRPCServerConfig(keypairs *pki.Keypairs, myPeerID string) (*tls.Config, err config := certutil.Config{ CommonName: "etcd-manager-server-" + myPeerID, - Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}, + Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}, } keypair, err := keypairs.EnsureKeypair("etcd-manager-server-"+myPeerID, config, ca)