Remove EKU from TLS intermediates

elonen · Sep 17, 2024 · bf88cd2 · bf88cd2
1 parent a8df744
commit bf88cd2
Showing 1 changed file with 0 additions and 5 deletions.
diff --git a/hsm-conf.yml b/hsm-conf.yml
@@ -382,11 +382,6 @@ tls:
           path_len: 0 # Allow end-entity certificate signing only
         name_constraints:
           <<: *TLS_NAME_CONSTRAINTS
-        extended_key_usage:
-          usages:
-            - serverAuth
-            - clientAuth
-            - timeStamping
         attribs:
           common_name: '{{ ORG_NAME }} TLS Intermediate T1 RSA4096'
       signed_certs: