mirrors/talos
1
0
Fork 0
mirror of https://github.com/siderolabs/talos.git synced 2025-10-11 15:41:11 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: use proper key usage for apid client certificate

Browse Source 
This command is referenced from PKI recovery documentation.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
This commit is contained in:
Andrey Smirnov 2022-12-19 14:33:42 +04:00
parent 171aa94679
commit a9643b4774
No known key found for this signature in database
GPG Key ID: 7B26396447AB6DFD
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cmd/talosctl/cmd/mgmt/gen/crt.go
View File

@ -76,7 +76,11 @@ var genCrtCmd = &cobra.Command{
return fmt.Errorf("error parsing CSR: %s", err)
}
signedCrt, err := x509.NewCertificateFromCSR(caCrt, caKey, ccsr, x509.NotAfter(time.Now().Add(time.Duration(genCrtCmdFlags.hours)*time.Hour)))
signedCrt, err := x509.NewCertificateFromCSR(caCrt, caKey, ccsr,
x509.NotAfter(time.Now().Add(time.Duration(genCrtCmdFlags.hours)*time.Hour)),
x509.KeyUsage(stdlibx509.KeyUsageDigitalSignature),
x509.ExtKeyUsage([]stdlibx509.ExtKeyUsage{stdlibx509.ExtKeyUsageClientAuth}),
)
if err != nil {
return fmt.Errorf("error signing certificate: %s", err)
}