Zac Bergquist f097bb2737 Fix self-signed cert validity on macOS systems (#32698) ...

As per https://support.apple.com/en-in/HT210176:

> TLS server certificates must contain an ExtendedKeyUsage (EKU)
  extension containing the id-kp-serverAuth OID.

We were not specifying this EKU.

Validated by checking with the old self-signed certs:

    $ security verify-cert -c webproxy_cert.pem -p ssl -r webproxy_cert.pem
    Cert Verify Result: Invalid Extended Key Usage for policy

And then repeating the process after this change:

    $ security verify-cert -c webproxy_cert.pem -p ssl -r webproxy_cert.pem
    ...certificate verification successful.

Closes #32531

2023-10-09 17:03:43 +00:00

..

certs.go

Use pre-generated RSA keys in tests (#18750)

2022-12-05 19:33:49 +00:00

selfsigned.go

Fix self-signed cert validity on macOS systems (#32698)

2023-10-09 17:03:43 +00:00