2 files changed, 8 insertions, 0 deletions
diff --git a/vespajlib/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java b/vespajlib/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java
index 49a69b00f26..b46293b2e2f 100644
--- a/vespajlib/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java
+++ b/vespajlib/src/main/java/com/yahoo/security/Pkcs10CsrBuilder.java
@@ -67,6 +67,10 @@ public class Pkcs10CsrBuilder {
         return this;
     }
 
+    public Pkcs10CsrBuilder setIsCertAuthority(boolean isCertAuthority) {
+        return setBasicConstraints(true, isCertAuthority);
+    }
+
     public Pkcs10Csr build() {
         try {
             PKCS10CertificationRequestBuilder requestBuilder =
diff --git a/vespajlib/src/main/java/com/yahoo/security/X509CertificateBuilder.java b/vespajlib/src/main/java/com/yahoo/security/X509CertificateBuilder.java
index a5b79c9a9f9..826284d2229 100644
--- a/vespajlib/src/main/java/com/yahoo/security/X509CertificateBuilder.java
+++ b/vespajlib/src/main/java/com/yahoo/security/X509CertificateBuilder.java
@@ -122,6 +122,10 @@ public class X509CertificateBuilder {
         return this;
     }
 
+    public X509CertificateBuilder setIsCertAuthority(boolean isCertAuthority) {
+        return setBasicConstraints(true, isCertAuthority);
+    }
+
     public X509Certificate build() {
         try {
             JcaX509v3CertificateBuilder jcaCertBuilder = new JcaX509v3CertificateBuilder(