Adding client usage extension for server cert (kopeio#305)

Signed-off-by: mmerrill3 <[email protected]>
mmerrill3 · Mar 16, 2020 · 46f67f7 · 46f67f7
1 parent cd09bd6
commit 46f67f7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/tlsconfig/options.go b/pkg/tlsconfig/options.go
@@ -48,7 +48,7 @@ func GRPCServerConfig(keypairs *pki.Keypairs, myPeerID string) (*tls.Config, err
 
 	config := certutil.Config{
 		CommonName: "etcd-manager-server-" + myPeerID,
-		Usages:     []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+		Usages:     []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth},
 	}
 
 	keypair, err := keypairs.EnsureKeypair("etcd-manager-server-"+myPeerID, config, ca)