added KeyUsageKeyEncipherment (#1822)

srl-labs · Jan 17, 2024 · 851d67c · 851d67c
1 parent 475cd42
commit 851d67c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cert/ca.go b/cert/ca.go
@@ -134,7 +134,7 @@ func (ca *CA) GenerateAndSignNodeCert(input *NodeCSRInput) (*Certificate, error)
 		NotAfter:     time.Now().Add(expiry),
 		SubjectKeyId: []byte{1, 2, 3, 4, 6},
 		ExtKeyUsage:  []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth, x509.ExtKeyUsageServerAuth},
-		KeyUsage:     x509.KeyUsageDigitalSignature,
+		KeyUsage:     x509.KeyUsageDigitalSignature | x509.KeyUsageKeyEncipherment,
 	}
 
 	newPrivKey, err := rsa.GenerateKey(rand.Reader, keysize)