From 03a2d608c29929591445edb5f25c365280352a54 Mon Sep 17 00:00:00 2001
From: Xiang Li <xiang.li@coreos.com>
Date: Sun, 11 Aug 2013 00:46:08 -0700
Subject: [PATCH] add x509 extended key usage

---
 fixtures/ca/openssl.cnf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/fixtures/ca/openssl.cnf b/fixtures/ca/openssl.cnf
index c70a6ac15..a100e38b6 100644
--- a/fixtures/ca/openssl.cnf
+++ b/fixtures/ca/openssl.cnf
@@ -191,7 +191,8 @@ authorityKeyIdentifier=keyid,issuer
 #nsSslServerName
 
 # This is required for TSA certificates.
-# extendedKeyUsage = critical,timeStamping
+# This is required for client Auth and server Auth
+# extendedKeyUsage = critical,timeStamping,serverauth,clientauth
 
 [ v3_req ]