relax cert verification constraints

we have more than just server auth!

cmd/dkl-local-server/tls-ca.go

@@ -148,7 +148,7 @@ func getUsableKeyCert(cluster, caName, name, profile, label string, req *csr.Cer
 					return
 				}
 
-				_, err = cert.Verify(x509.VerifyOptions{Roots: pool})
+				_, err = cert.Verify(x509.VerifyOptions{Roots: pool, KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageAny}})
 				return
 			}()
 			if err == nil {

html/ui/app.css

@@ -10,16 +10,13 @@
 .downloads {
   & > * {
     display: inline-block;
-    margin-left: 1ex;
+    margin-right: 1ex;
     margin-bottom: 1ex;
     padding: 0.5ex;
     border: 1px solid;
     border-radius: 1ex;
     cursor: pointer;
   }
-  & > *:first-child {
-    margin-left: 0;
-  }
   & > .selected {
     color: blue;
   }

html/ui/js/Downloads.js

@@ -64,10 +64,9 @@ export default {
       {{" "}}
     </template>
   </p>
-  <button :disabled="createDisabled || assets.length==0" @click="createToken">Create links</button>
+  <p><button :disabled="createDisabled || assets.length==0" @click="createToken">Create links</button></p>
   <template v-if="downloads.length">
     <h4>Active links</h4>
     <p class="download-links"><template v-for="d in downloads"><a :href="d.url" download>{{ d.name }}</a>{{" "}}</template></p>
-  </template>
-</div>`
+  </template>`
 }