X-Git-Url: https://git.distorted.org.uk/~mdw/ca/blobdiff_plain/c4e3d3a6add39811cbae3ce697c1a5d9f7246d6a..ca2cccd082ee593d1593cac40dd51eee98890707:/etc/openssl.conf

diff --git a/etc/openssl.conf b/etc/openssl.conf
index 1accc80..1fe673a 100644
--- a/etc/openssl.conf
+++ b/etc/openssl.conf
@@ -103,7 +103,7 @@ crlDistributionPoints = URI:http://www.distorted.org.uk/ca/crl
 
 [tls-client-extensions]
 basicConstraints = critical, CA:FALSE
-keyUsage = critical, digitalSignature
+keyUsage = critical, digitalSignature, keyEncipherment
 extendedKeyUsage = clientAuth
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always