test-suites/pathbuilding: add EKU to EE certs

Signed-off-by: William Woodruff <william@trailofbits.com>
Netflix · Dec 1, 2023 · 859af10 · 859af10
1 parent 7161932
commit 859af10
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/test-suites/pathbuilding/generate_certs.go b/test-suites/pathbuilding/generate_certs.go
@@ -7,6 +7,7 @@ import (
 	"crypto/x509"
 	"crypto/x509/pkix"
 	"fmt"
+
 	"github.com/Netflix/bettertls/test-suites/certutil"
 )
 
@@ -51,6 +52,7 @@ func GenerateCerts(rootCa *x509.Certificate, rootKey crypto.Signer, leafDnsName
 				SerialNumber: certutil.RandomString(),
 			}
 			template.DNSNames = []string{leafDnsName}
+			template.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
 		}
 
 		if isInvalid {