Hi all,
For now I simply generate client certs with:
openssl.cnf:
>…
>extendedKeyUsage=critical, clientAuth
>…
Following task to add some other purposes I've point into some questions:
1. Is list extendedKeyUsage values limited? And, if so, there this limitation is declared?
2. Optional keyword «critical» belongs to this list or not?