From d06f6e7ccf0cc7b3e8bf2327a3e089cefd6374a8 Mon Sep 17 00:00:00 2001
From: Arne Fitzenreiter <arne_f@ipfire.org>
Date: Sun, 4 Dec 2011 14:36:00 +0100
Subject: [PATCH] vpnmain.cgi: add "extendedKeyUsage = serverAuth" to hostkey
 signing.

---
 html/cgi-bin/vpnmain.cgi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index eea2c01ace..0fb7c930a7 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1031,6 +1031,7 @@ END
 	    nsComment="OpenSSL Generated Certificate"
 	    subjectKeyIdentifier=hash
 	    authorityKeyIdentifier=keyid,issuer:always
+	    extendedKeyUsage = serverAuth
 END
 ;
 	    print $fh "subjectAltName=$cgiparams{'SUBJECTALTNAME'}" if ($cgiparams{'SUBJECTALTNAME'});
-- 
2.39.2