Added support for extended key usage extension.

The NSSDB.create_request() has been modified to support extended key usage extension. https://pagure.io/dogtagpki/issue/2280 Change-Id: I9d1b6f8b21dbb956b54bdde9cfd878ed5522b5b1
dogtagpki · Aug 16, 2017 · f183cca · f183cca
1 parent d0a8619
commit f183cca
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/base/common/python/pki/nssdb.py b/base/common/python/pki/nssdb.py
@@ -209,6 +209,7 @@ def create_request(self, subject_dn, request_file, noise_file=None,
                        hash_alg=None,
                        basic_constraints_ext=None,
                        key_usage_ext=None,
+                       extended_key_usage_ext=None,
                        generic_exts=None):
 
         tmpdir = tempfile.mkdtemp()
@@ -289,6 +290,17 @@ def create_request(self, subject_dn, request_file, noise_file=None,
 
                 keystroke += '\n'
 
+            if extended_key_usage_ext:
+
+                cmd.extend(['--extKeyUsage'])
+
+                usages = []
+                for usage in extended_key_usage_ext:
+                    if extended_key_usage_ext[usage]:
+                        usages.append(usage)
+
+                cmd.extend([','.join(usages)])
+
             if generic_exts:
 
                 cmd.extend(['--extGeneric'])