relax cert verification constraints
we have more than just server auth!
This commit is contained in:
@ -148,7 +148,7 @@ func getUsableKeyCert(cluster, caName, name, profile, label string, req *csr.Cer
|
|||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
_, err = cert.Verify(x509.VerifyOptions{Roots: pool})
|
_, err = cert.Verify(x509.VerifyOptions{Roots: pool, KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageAny}})
|
||||||
return
|
return
|
||||||
}()
|
}()
|
||||||
if err == nil {
|
if err == nil {
|
||||||
|
Reference in New Issue
Block a user