Skip to content

Commit d25d2bc

Browse files
author
Kamil Wąż
committed
Fix mongoose certs
The certificates used for MIM were broken by #4631. Erlang verifies `serverAuth` against `keyUsage`, which causes the `ssl_certificate:verify_extkeyusage/2` function to fail. The issue wasn't noticed immediately because the certificates are cached using a key generated by `tools/make-certs-cache-key.sh`
1 parent 2a88a98 commit d25d2bc

2 files changed

Lines changed: 1 addition & 2 deletions

File tree

tools/make-certs-cache-key.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ year=$(date "+%Y")
66
makefile_sum=$(sha1sum tools/ssl/Makefile | cut -d " " -f1)
77

88
# Change it once incompatible changes are made in tools/ssl/ directory
9-
CERT_KEY_VERSION=1
9+
CERT_KEY_VERSION=2
1010

1111
# CI_CERT_KEY_VERSION could be set in
1212
# https://app.circleci.com/settings/project/github/esl/MongooseIM/environment-variables

tools/ssl/openssl-mongooseim.cnf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,6 @@ commonName = MongooseIM
2222
subjectKeyIdentifier = hash
2323
basicConstraints = CA:FALSE
2424
keyUsage = digitalSignature, keyEncipherment
25-
extendedKeyUsage = serverAuth
2625
subjectAltName = @alternate_names
2726
nsComment = "Fake Dev-Only Certificate"
2827

0 commit comments

Comments
 (0)