Drop codeSigning EKU from certificates with email SANs

Unclear how those are correlated. If it breaks something we can put it back. Fixes FiloSottile#303
m-2k · Oct 27, 2020 · 9f583c6 · 9f583c6
1 parent c12e242
commit 9f583c6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cert.go b/cert.go
@@ -93,7 +93,7 @@ func (m *mkcert) makeCert(hosts []string) {
 		tpl.ExtKeyUsage = []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}
 	}
 	if len(tpl.EmailAddresses) > 0 {
-		tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageCodeSigning, x509.ExtKeyUsageEmailProtection)
+		tpl.ExtKeyUsage = append(tpl.ExtKeyUsage, x509.ExtKeyUsageEmailProtection)
 	}
 
 	// IIS (the main target of PKCS #12 files), only shows the deprecated