google/stenographer

Certificates are not created with ClientAuth EKU

Straevaras opened this issue · 0 comments

I'm a little confused that I would be the only one to come across this, but it appears that when the default Client certificates are made for authentication with stenoread, the ClientAuth EKU is not getting included into the certificate generation, and I cannot connect to stenographer with stenoread because of this.

Adding "-extensions ${TYP}_ext" into the arguments for the certificate generation fixes the issue for me.