summaryrefslogtreecommitdiff
path: root/cups
diff options
context:
space:
mode:
authorMichael R Sweet <michael.r.sweet@gmail.com>2019-02-05 13:03:22 -0500
committerMichael R Sweet <michael.r.sweet@gmail.com>2019-02-05 13:03:22 -0500
commite625fa13200089ccca1a48a94deb8b00f4ed8591 (patch)
tree8b025eb69231f5361a12e7982fd50dfaad914ae5 /cups
parentd9f301dd149477803d806414bed14d0d75910eea (diff)
downloadcups-e625fa13200089ccca1a48a94deb8b00f4ed8591.tar.gz
Fix a GNU TLS certificate problem (Issue #5506)
Diffstat (limited to 'cups')
-rw-r--r--cups/tls-gnutls.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/cups/tls-gnutls.c b/cups/tls-gnutls.c
index 05ec8ec7f..8e45db27b 100644
--- a/cups/tls-gnutls.c
+++ b/cups/tls-gnutls.c
@@ -1,7 +1,7 @@
/*
* TLS support code for CUPS using GNU TLS.
*
- * Copyright © 2007-2018 by Apple Inc.
+ * Copyright © 2007-2019 by Apple Inc.
* Copyright © 1997-2007 by Easy Software Products, all rights reserved.
*
* Licensed under Apache License v2.0. See the file "LICENSE" for more
@@ -171,7 +171,7 @@ cupsMakeServerCredentials(
if (num_alt_names > 0)
gnutls_x509_crt_set_subject_alternative_name(crt, GNUTLS_SAN_DNSNAME, alt_names[0]);
gnutls_x509_crt_set_key_purpose_oid(crt, GNUTLS_KP_TLS_WWW_SERVER, 0);
- gnutls_x509_crt_set_key_usage(crt, GNUTLS_KEY_KEY_ENCIPHERMENT);
+ gnutls_x509_crt_set_key_usage(crt, GNUTLS_KEY_DIGITAL_SIGNATURE | GNUTLS_KEY_KEY_ENCIPHERMENT);
gnutls_x509_crt_set_version(crt, 3);
bytes = sizeof(buffer);