Fix certificate purpose

smoeding · smoeding · commit e5767d034649 · 2025-01-28T08:32:20.000+01:00
diff --git a/puppetserver-metrics.py b/puppetserver-metrics.py
@@ -1,6 +1,6 @@
 #!/usr/bin/python3
 #
-# Copyright (c) 2023, 2024, Stefan Möding
+# Copyright (c) 2023, 2024, 2025, Stefan Möding
 #
 # Redistribution and use in source and binary forms, with or without
 # modification, are permitted provided that the following conditions are met:
@@ -487,7 +487,7 @@ def setup(self):
                 raise CustomException('No usable client key found')
 
         # Create SSL context for client authentication
-        ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, cafile=cacert)
+        ctx = ssl.create_default_context(ssl.Purpose.SERVER_AUTH, cafile=cacert)
         ctx.load_cert_chain(cert, key)
 
         # TLSv1.3 would be nice but might not (yet) be available everywhere

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#!/usr/bin/python3`
`2`	`2`	`#`
`3`		`-# Copyright (c) 2023, 2024, Stefan Möding`
	`3`	`+# Copyright (c) 2023, 2024, 2025, Stefan Möding`
`4`	`4`	`#`
`5`	`5`	`# Redistribution and use in source and binary forms, with or without`
`6`	`6`	`# modification, are permitted provided that the following conditions are met:`
`@@ -487,7 +487,7 @@ def setup(self):`
`487`	`487`	`raise CustomException('No usable client key found')`
`488`	`488`
`489`	`489`	`# Create SSL context for client authentication`
`490`		`- ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH, cafile=cacert)`
	`490`	`+ ctx = ssl.create_default_context(ssl.Purpose.SERVER_AUTH, cafile=cacert)`
`491`	`491`	`ctx.load_cert_chain(cert, key)`
`492`	`492`
`493`	`493`	`# TLSv1.3 would be nice but might not (yet) be available everywhere`