From 4ee64ac3e31fa6d44c161a24bc1dbbacdae87547 Mon Sep 17 00:00:00 2001
From: Stefan Pietsch <mail.ipv4v6+gh@gmail.com>
Date: Mon, 6 May 2019 23:52:55 +0200
Subject: [PATCH] Set nonRepudiation bit for email certificates

---
 easyrsa3/x509-types/email | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/easyrsa3/x509-types/email b/easyrsa3/x509-types/email
index ccd6b13..7daa88e 100644
--- a/easyrsa3/x509-types/email
+++ b/easyrsa3/x509-types/email
@@ -4,5 +4,5 @@ basicConstraints = CA:FALSE
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid,issuer:always
 extendedKeyUsage = emailProtection
-keyUsage = digitalSignature,keyEncipherment
+keyUsage = digitalSignature,keyEncipherment,nonRepudiation