From 9e06d816ae428fb0fdaa858dd350777627997cba Mon Sep 17 00:00:00 2001
From: elijah <elijah@riseup.net>
Date: Thu, 13 Dec 2012 14:03:44 -0800
Subject: client certs should only have digitalSignature

---
 lib/leap_cli/commands/ca.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'lib/leap_cli')

diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb
index 63749ca..779fa30 100644
--- a/lib/leap_cli/commands/ca.rb
+++ b/lib/leap_cli/commands/ca.rb
@@ -337,7 +337,7 @@ module LeapCli; module Commands
       "digest" => "SHA256",
       "extensions" => {
         "keyUsage" => {
-          "usage" => ["digitalSignature", "keyEncipherment"]
+          "usage" => ["digitalSignature"]
         },
         "extendedKeyUsage" => {
           "usage" => ["clientAuth"]
-- 
cgit v1.2.3