From 772c9ca4d5839f07c59e0ce6281b69d3b757f8ea Mon Sep 17 00:00:00 2001
From: Daniel Tomcej <daniel.tomcej@gmail.com>
Date: Fri, 25 Oct 2019 10:08:05 -0500
Subject: [PATCH] Allow Default Certificate to work on macOS 10.15

---
 tls/generate/generate.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tls/generate/generate.go b/tls/generate/generate.go
index fd0744ade..8dbfa00aa 100644
--- a/tls/generate/generate.go
+++ b/tls/generate/generate.go
@@ -86,6 +86,7 @@ func derCert(privKey *rsa.PrivateKey, expiration time.Time, domain string) ([]by
 		NotAfter:  expiration,
 
 		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageKeyAgreement | x509.KeyUsageDataEncipherment,
+		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		BasicConstraintsValid: true,
 		DNSNames:              []string{domain},
 	}