aboutsummaryrefslogtreecommitdiffstats
path: root/netlib/certutils.py
diff options
context:
space:
mode:
authorMaximilian Hils <git@maximilianhils.com>2014-06-29 13:10:07 +0200
committerMaximilian Hils <git@maximilianhils.com>2014-06-29 13:10:07 +0200
commit4d5d8b65114d061da4f6a41673011ce643c29aab (patch)
tree7d8b33d22f27ccd149c8e4e701b103fca886dda9 /netlib/certutils.py
parentdfabe165d46b726fc38e73b37b42c09bdc709795 (diff)
downloadmitmproxy-4d5d8b65114d061da4f6a41673011ce643c29aab.tar.gz
mitmproxy-4d5d8b65114d061da4f6a41673011ce643c29aab.tar.bz2
mitmproxy-4d5d8b65114d061da4f6a41673011ce643c29aab.zip
mark nsCertType non-critical, fix #39
Diffstat (limited to 'netlib/certutils.py')
-rw-r--r--netlib/certutils.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/netlib/certutils.py b/netlib/certutils.py
index 187abfae..8aec5e82 100644
--- a/netlib/certutils.py
+++ b/netlib/certutils.py
@@ -29,7 +29,7 @@ def create_ca(o, cn, exp):
cert.add_extensions([
OpenSSL.crypto.X509Extension("basicConstraints", True,
"CA:TRUE"),
- OpenSSL.crypto.X509Extension("nsCertType", True,
+ OpenSSL.crypto.X509Extension("nsCertType", False,
"sslCA"),
OpenSSL.crypto.X509Extension("extendedKeyUsage", True,
"serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC"