I am working on adding keyCertSign to a CA cert using:

builder = builder.add_extension(
    x509.ExtendedKeyUsage(keyCertSign, path_length=None), critical=True,
    )

keyCertSign is what I have used in my openSSL config file.  But I get the error:

    x509.ExtendedKeyUsage(keyCertSign, path_length=None), critical=True,
                          ^^^^^^^^^^^
NameError: name 'keyCertSign' is not defined

What is the proper arg for this EKU?

Thanks

_______________________________________________
Cryptography-dev mailing list
Cryptography-dev@python.org
https://mail.python.org/mailman/listinfo/cryptography-dev

Reply via email to