Add support for EK certificate extended key usage

AlexandreEXFO · AlexandreEXFO · commit d09b63c76b03 · 2025-01-21T07:37:17.000-05:00
diff --git a/src/crypto/x509/x509.go b/src/crypto/x509/x509.go
@@ -621,6 +621,7 @@ var (
 	oidExtKeyUsageNetscapeServerGatedCrypto      = asn1.ObjectIdentifier{2, 16, 840, 1, 113730, 4, 1}
 	oidExtKeyUsageMicrosoftCommercialCodeSigning = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 311, 2, 1, 22}
 	oidExtKeyUsageMicrosoftKernelCodeSigning     = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 311, 61, 1, 1}
+	oidExtKeyUsageEkCertificate                  = asn1.ObjectIdentifier{2, 23, 133, 8, 1}
 )
 
 // ExtKeyUsage represents an extended set of actions that are valid for a given key.
@@ -642,6 +643,7 @@ const (
 	ExtKeyUsageNetscapeServerGatedCrypto
 	ExtKeyUsageMicrosoftCommercialCodeSigning
 	ExtKeyUsageMicrosoftKernelCodeSigning
+	ExtKeyUsageEkCertificate
 )
 
 // extKeyUsageOIDs contains the mapping between an ExtKeyUsage and its OID.
@@ -663,6 +665,7 @@ var extKeyUsageOIDs = []struct {
 	{ExtKeyUsageNetscapeServerGatedCrypto, oidExtKeyUsageNetscapeServerGatedCrypto},
 	{ExtKeyUsageMicrosoftCommercialCodeSigning, oidExtKeyUsageMicrosoftCommercialCodeSigning},
 	{ExtKeyUsageMicrosoftKernelCodeSigning, oidExtKeyUsageMicrosoftKernelCodeSigning},
+	{ExtKeyUsageEkCertificate, oidExtKeyUsageEkCertificate},
 }
 
 func extKeyUsageFromOID(oid asn1.ObjectIdentifier) (eku ExtKeyUsage, ok bool) {

Original file line number	Diff line number	Diff line change
`@@ -621,6 +621,7 @@ var (`
`621`	`621`	`oidExtKeyUsageNetscapeServerGatedCrypto = asn1.ObjectIdentifier{2, 16, 840, 1, 113730, 4, 1}`
`622`	`622`	`oidExtKeyUsageMicrosoftCommercialCodeSigning = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 311, 2, 1, 22}`
`623`	`623`	`oidExtKeyUsageMicrosoftKernelCodeSigning = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 311, 61, 1, 1}`
	`624`	`+ oidExtKeyUsageEkCertificate = asn1.ObjectIdentifier{2, 23, 133, 8, 1}`
`624`	`625`	`)`
`625`	`626`
`626`	`627`	`// ExtKeyUsage represents an extended set of actions that are valid for a given key.`
`@@ -642,6 +643,7 @@ const (`
`642`	`643`	`ExtKeyUsageNetscapeServerGatedCrypto`
`643`	`644`	`ExtKeyUsageMicrosoftCommercialCodeSigning`
`644`	`645`	`ExtKeyUsageMicrosoftKernelCodeSigning`
	`646`	`+ ExtKeyUsageEkCertificate`
`645`	`647`	`)`
`646`	`648`
`647`	`649`	`// extKeyUsageOIDs contains the mapping between an ExtKeyUsage and its OID.`
`@@ -663,6 +665,7 @@ var extKeyUsageOIDs = []struct {`
`663`	`665`	`{ExtKeyUsageNetscapeServerGatedCrypto, oidExtKeyUsageNetscapeServerGatedCrypto},`
`664`	`666`	`{ExtKeyUsageMicrosoftCommercialCodeSigning, oidExtKeyUsageMicrosoftCommercialCodeSigning},`
`665`	`667`	`{ExtKeyUsageMicrosoftKernelCodeSigning, oidExtKeyUsageMicrosoftKernelCodeSigning},`
	`668`	`+ {ExtKeyUsageEkCertificate, oidExtKeyUsageEkCertificate},`
`666`	`669`	`}`
`667`	`670`
`668`	`671`	`func extKeyUsageFromOID(oid asn1.ObjectIdentifier) (eku ExtKeyUsage, ok bool) {`