From 2d193d380d13e0c8b3c9312c26613d58fa7837df Mon Sep 17 00:00:00 2001 From: Quanah Gibson-Mount Date: Fri, 22 Mar 2019 22:19:28 +0000 Subject: [PATCH] For https://github.com/heimdal/heimdal/issues/392 Correctly reference the OID so gen-cert.sh works correctly --- lib/hx509/data/openssl.1.1.cnf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/hx509/data/openssl.1.1.cnf b/lib/hx509/data/openssl.1.1.cnf index c2f760f1e..110073f26 100644 --- a/lib/hx509/data/openssl.1.1.cnf +++ b/lib/hx509/data/openssl.1.1.cnf @@ -130,7 +130,7 @@ subjectKeyIdentifier = hash [pkinit_kdc_cert] basicConstraints=CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment -extendedKeyUsage = pkkdcekuoid +extendedKeyUsage = 1.3.6.1.5.2.3.5 subjectKeyIdentifier = hash subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:pkinitkdc_princ_name