PHP proxy creates cert with basic constraints

smous · Aug 18, 2015 · 7d93d19 · 7d93d19
1 parent 0b5259d
commit 7d93d19
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/php_proxy/local/cert_util.py b/php_proxy/local/cert_util.py
@@ -179,6 +179,8 @@ def create_ca():
         ca.set_subject(req.get_subject())
         ca.set_pubkey(req.get_pubkey())
         ca.sign(key, CertUtil.ca_digest)
+        v3 = OpenSSL.crypto.X509Extension('basicConstraints', False, 'CA:TRUE')
+        ca.add_extensions([v3])
         return key, ca
 
     @staticmethod