create_x509_type(): Add type: codeSign

Signed-off-by: Richard T Bonhomme <[email protected]>
OpenVPN · Oct 25, 2023 · 257af50 · 257af50
1 parent 607baaf
commit 257af50
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
@@ -6028,6 +6028,15 @@ create_x509_type() {
 		keyUsage = cRLSign, keyCertSign
 		X509_TYPE_CA
 	;;
+	codeSign)
+		cat <<- "X509_CODE_SIGNING"
+		basicConstraints = CA:FALSE
+		subjectKeyIdentifier = hash
+		authorityKeyIdentifier = keyid,issuer:always
+		extendedKeyUsage = codeSigning
+		keyUsage = digitalSignature
+		X509_CODE_SIGNING
+	;;
 	*)
 		return 1
 	esac