Adjust certificate validation for G3 PKI (#20)

raphaelm · web-flow · commit 0bb90fafc7a7 · 2026-03-04T11:45:07.000+01:00
diff --git a/src/peppol_py/sender.py b/src/peppol_py/sender.py
@@ -101,7 +101,7 @@ def validate_certificate(cert, test):
     )
     validator = CertificateValidator(cert, validation_context=context)
     validator.validate_usage(
-        key_usage={"key_encipherment", "key_agreement", "digital_signature"},
+        key_usage={"key_encipherment", "digital_signature"},
         extended_key_usage={"client_auth"},
         extended_optional=False,
     )

Original file line number	Diff line number	Diff line change
`@@ -101,7 +101,7 @@ def validate_certificate(cert, test):`
`101`	`101`	`)`
`102`	`102`	`validator = CertificateValidator(cert, validation_context=context)`
`103`	`103`	`validator.validate_usage(`
`104`		`- key_usage={"key_encipherment", "key_agreement", "digital_signature"},`
	`104`	`+ key_usage={"key_encipherment", "digital_signature"},`
`105`	`105`	`extended_key_usage={"client_auth"},`
`106`	`106`	`extended_optional=False,`
`107`	`107`	`)`