mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
TLS_ECDHE_ECDSA cipher suites require the server certificate to assert the digital signature key usage so the server can sign ephemeral key-exchange parameters. Without it, strict TLS clients reject the handshake even though the cert is otherwise valid. Added the usage to the leaf Certificate and extended the helm-unittest suite to cover it. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>