cert-selfsigned-example.py creates more correct CA

[pygost.git] / pygost / asn1schemas / x509.py

diff --git a/pygost/asn1schemas/x509.py b/pygost/asn1schemas/x509.py
index cda11da42dcb4d1a8daff65bb054b9c6d02108f4..f434fbb84d61e4f77b513119ed10f095c13a43f2 100644 (file)
--- a/pygost/asn1schemas/x509.py
+++ b/pygost/asn1schemas/x509.py
@@ -246,3 +246,17 @@ class AuthorityKeyIdentifier(Sequence):
         #     CertificateSerialNumber(impl=tag_ctxp(2), optional=True),
         # ),
     )
+
+
+class KeyUsage(BitString):
+    schema = (
+        ("digitalSignature", 0),
+        ("nonRepudiation", 1),
+        ("keyEncipherment", 2),
+        ("dataEncipherment", 3),
+        ("keyAgreement", 4),
+        ("keyCertSign", 5),
+        ("cRLSign", 6),
+        ("encipherOnly", 7),
+        ("decipherOnly", 8),
+    )