feat(tls): update schema for TLS keyusage

This commit is contained in:
William Yang 2023-10-05 16:25:09 +02:00
parent 90430fa66d
commit 8eb463c58d
2 changed files with 14 additions and 0 deletions

View File

@ -2117,6 +2117,14 @@ common_ssl_opts_schema(Defaults, Type) ->
desc => ?DESC(common_ssl_opts_schema_partial_chain)
}
)},
{"verify_peer_ext_key_usage",
sc(
string(),
#{
required => false,
desc => ?DESC(common_ssl_opts_verify_peer_ext_key_usage)
}
)},
{"reuse_sessions",
sc(
boolean(),

View File

@ -684,6 +684,12 @@ common_ssl_opts_schema_partial_chain.desc:
common_ssl_opts_schema_partial_chain.label:
"""Partial chain"""
common_ssl_opts_verify_peer_ext_key_usage.desc:
"""Verify Extended Key Usage in Peer's certificate"""
common_ssl_opts_verify_peer_ext_key_usage.label:
"""Verify KeyUsage in cert"""
fields_listeners_ssl.desc:
"""SSL listeners."""