Adding clientAuth to issued certificates

iadgovuser59 · iadgovuser59 · commit e3998e02c909 · 2024-11-20T16:23:09.000-05:00
diff --git a/HIRS_AttestationCA/src/main/java/hirs/attestationca/persist/provision/helper/IssuedCertificateAttributeHelper.java b/HIRS_AttestationCA/src/main/java/hirs/attestationca/persist/provision/helper/IssuedCertificateAttributeHelper.java
@@ -55,9 +55,11 @@ public final class IssuedCertificateAttributeHelper {
         try {
             extension = new Extension(Extension.extendedKeyUsage, true,
                     new ExtendedKeyUsage(new KeyPurposeId[] {
-                            KeyPurposeId.getInstance(TCG_KP_AIK_CERTIFICATE_ATTRIBUTE)}).getEncoded());
+                            KeyPurposeId.getInstance(TCG_KP_AIK_CERTIFICATE_ATTRIBUTE),
+                            KeyPurposeId.getInstance(KeyPurposeId.id_kp_clientAuth)
+                            }).getEncoded());
         } catch (IOException e) {
-//            log.error("Error generating extended key usage extension");
+            log.error("Error generating extended key usage extension");
         }
         EXTENDED_KEY_USAGE_EXTENSION = extension;
     }

Original file line number	Diff line number	Diff line change
`@@ -55,9 +55,11 @@ public final class IssuedCertificateAttributeHelper {`
`55`	`55`	`try {`
`56`	`56`	`extension = new Extension(Extension.extendedKeyUsage, true,`
`57`	`57`	`new ExtendedKeyUsage(new KeyPurposeId[] {`
`58`		`- KeyPurposeId.getInstance(TCG_KP_AIK_CERTIFICATE_ATTRIBUTE)}).getEncoded());`
	`58`	`+ KeyPurposeId.getInstance(TCG_KP_AIK_CERTIFICATE_ATTRIBUTE),`
	`59`	`+ KeyPurposeId.getInstance(KeyPurposeId.id_kp_clientAuth)`
	`60`	`+ }).getEncoded());`
`59`	`61`	`} catch (IOException e) {`
`60`		`-// log.error("Error generating extended key usage extension");`
	`62`	`+ log.error("Error generating extended key usage extension");`
`61`	`63`	`}`
`62`	`64`	`EXTENDED_KEY_USAGE_EXTENSION = extension;`
`63`	`65`	`}`