From b1f539a5e5fcd9592d83c94afb74f5f829a7462e Mon Sep 17 00:00:00 2001
From: jbjohnso <jbjohnso@8638fb3e-16cb-4fca-ae20-7b5d299a9bcd>
Date: Wed, 17 Apr 2013 13:53:47 +0000
Subject: [PATCH] Fix openssl template for 'server' to also allowed to be a
 'client' to restore hierarchy

git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/branches/2.8@16007 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
---
 xCAT-server/share/xcat/ca/openssl.cnf.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/xCAT-server/share/xcat/ca/openssl.cnf.tmpl b/xCAT-server/share/xcat/ca/openssl.cnf.tmpl
index 4f4fcc04c..4aa8fd733 100644
--- a/xCAT-server/share/xcat/ca/openssl.cnf.tmpl
+++ b/xCAT-server/share/xcat/ca/openssl.cnf.tmpl
@@ -163,7 +163,7 @@ nsComment			= "OpenSSL Generated Server Certificate"
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid,issuer
 keyUsage = digitalSignature,keyAgreement,keyEncipherment
-extendedKeyUsage = serverAuth
+extendedKeyUsage = serverAuth, clientAuth
 
 [ usr_cert ]