From 95930092213989489b4c691511f7d05ad13d9ade Mon Sep 17 00:00:00 2001 From: Stefan Pietsch Date: Sat, 4 May 2019 16:48:46 +0200 Subject: [PATCH 1/2] Add x509-type for email certificates --- easyrsa3/x509-types/email | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 easyrsa3/x509-types/email diff --git a/easyrsa3/x509-types/email b/easyrsa3/x509-types/email new file mode 100644 index 0000000..ccd6b13 --- /dev/null +++ b/easyrsa3/x509-types/email @@ -0,0 +1,8 @@ +# X509 extensions for email + +basicConstraints = CA:FALSE +subjectKeyIdentifier = hash +authorityKeyIdentifier = keyid,issuer:always +extendedKeyUsage = emailProtection +keyUsage = digitalSignature,keyEncipherment + From 4ee64ac3e31fa6d44c161a24bc1dbbacdae87547 Mon Sep 17 00:00:00 2001 From: Stefan Pietsch Date: Mon, 6 May 2019 23:52:55 +0200 Subject: [PATCH 2/2] Set nonRepudiation bit for email certificates --- easyrsa3/x509-types/email | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/easyrsa3/x509-types/email b/easyrsa3/x509-types/email index ccd6b13..7daa88e 100644 --- a/easyrsa3/x509-types/email +++ b/easyrsa3/x509-types/email @@ -4,5 +4,5 @@ basicConstraints = CA:FALSE subjectKeyIdentifier = hash authorityKeyIdentifier = keyid,issuer:always extendedKeyUsage = emailProtection -keyUsage = digitalSignature,keyEncipherment +keyUsage = digitalSignature,keyEncipherment,nonRepudiation