Fix Python 3.13 SSL failure

eandersson · Oct 13, 2024 · f0df3af · f0df3af
1 parent 8704739
commit f0df3af
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/docker/files/openssl.cnf b/docker/files/openssl.cnf
@@ -44,12 +44,13 @@ basicConstraints = CA:true
 keyUsage = keyCertSign, cRLSign
 
 [ client_ca_extensions ]
-basicConstraints = CA:false
-keyUsage = digitalSignature,keyEncipherment
+basicConstraints=critical, CA:TRUE
+keyUsage = critical, cRLSign, digitalSignature, keyCertSign
 extendedKeyUsage = 1.3.6.1.5.5.7.3.2
 
 [ server_ca_extensions ]
-basicConstraints = CA:false
-keyUsage = digitalSignature,keyEncipherment
+basicConstraints=critical, CA:TRUE
+keyUsage = critical, cRLSign, digitalSignature, keyCertSign
 extendedKeyUsage = 1.3.6.1.5.5.7.3.1
 subjectAltName = DNS:rmq.eandersson.net
+