allow specifying nsCertType in config

[stack/cam.git] / cam / ca.py

diff --git a/cam/ca.py b/cam/ca.py
index a19835f..f8a202f 100644 (file)
--- a/cam/ca.py
+++ b/cam/ca.py
@@ -169,7 +169,7 @@ class CA(object):
             csr_file = os.path.join(tmpdir, '%s.csr' % cert.name)
             conf_file = os.path.join(tmpdir, '%s.conf' % cert.name)
             ext_file = os.path.join(tmpdir, '%s-ext.conf' % cert.name)
-            conf = {}
+            conf = {'usage': 'client, server'}
             conf.update(self.config)
             conf['cn'] = cert.cn
             conf['days'] = cert.days or self.config['default_days']