From a795e32c11ddec477e788e3882a3ba7ca3e47dab Mon Sep 17 00:00:00 2001
From: David Hook <dgh@cryptoworkshop.com>
Date: Sun, 10 Jul 2022 13:31:41 +1000
Subject: initial setting of trusted certificate entry

---
 crypto/src/pkcs/Pkcs12Store.cs | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/crypto/src/pkcs/Pkcs12Store.cs b/crypto/src/pkcs/Pkcs12Store.cs
index f6e5c32e5..dc5f41dd5 100644
--- a/crypto/src/pkcs/Pkcs12Store.cs
+++ b/crypto/src/pkcs/Pkcs12Store.cs
@@ -827,6 +827,14 @@ namespace Org.BouncyCastle.Pkcs
                             new DerSet(new DerBmpString(certId))));
                 }
 
+                if (cert[MiscObjectIdentifiers.id_oracle_pkcs12_trusted_key_usage] == null)
+                {
+                    fName.Add(
+                        new DerSequence(
+                            MiscObjectIdentifiers.id_oracle_pkcs12_trusted_key_usage,
+                            new DerSet(KeyPurposeID.AnyExtendedKeyUsage)));
+                }
+
                 certBags.Add(new SafeBag(PkcsObjectIdentifiers.CertBag, cBag.ToAsn1Object(), new DerSet(fName)));
 
                 doneCerts.Add(cert.Certificate);
-- 
cgit 1.4.1