From 4d5d8b65114d061da4f6a41673011ce643c29aab Mon Sep 17 00:00:00 2001
From: Maximilian Hils <git@maximilianhils.com>
Date: Sun, 29 Jun 2014 13:10:07 +0200
Subject: mark nsCertType non-critical, fix #39

---
 netlib/certutils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'netlib/certutils.py')

diff --git a/netlib/certutils.py b/netlib/certutils.py
index 187abfae..8aec5e82 100644
--- a/netlib/certutils.py
+++ b/netlib/certutils.py
@@ -29,7 +29,7 @@ def create_ca(o, cn, exp):
     cert.add_extensions([
       OpenSSL.crypto.X509Extension("basicConstraints", True,
                                    "CA:TRUE"),
-      OpenSSL.crypto.X509Extension("nsCertType", True,
+      OpenSSL.crypto.X509Extension("nsCertType", False,
                                    "sslCA"),
       OpenSSL.crypto.X509Extension("extendedKeyUsage", True,
                                     "serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC"
-- 
cgit v1.2.3