Allow msSmartcardLogon EKU to be built
authorAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 4 Dec 2015 05:55:33 +0000 (06:55 +0100)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Fri, 11 Dec 2015 17:26:54 +0000 (18:26 +0100)
src/libstrongswan/plugins/x509/x509_cert.c

index 96280a0..2b83f33 100644 (file)
@@ -2143,8 +2143,8 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert,
                msSmartcardLogon = asn1_build_known_oid(OID_MS_SMARTCARD_LOGON);
        }
 
-       if (serverAuth.ptr || clientAuth.ptr || ikeIntermediate.ptr ||
-               ocspSigning.ptr)
+       if (serverAuth.ptr  || clientAuth.ptr || ikeIntermediate.ptr ||
+               ocspSigning.ptr || msSmartcardLogon.ptr)
        {
                extendedKeyUsage = asn1_wrap(ASN1_SEQUENCE, "mm",
                                                                asn1_build_known_oid(OID_EXTENDED_KEY_USAGE),