From 08b04c8e026ce83fb7e2167fa585ae9e2cfc1e33 Mon Sep 17 00:00:00 2001
From: Davide De Rosa <keeshux@gmail.com>
Date: Mon, 18 Mar 2019 17:27:48 +0100
Subject: [PATCH] Fix not propagated checksEKU flag

---
 CHANGELOG.md                              | 1 +
 TunnelKit/Sources/Core/SessionProxy.swift | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 073b7ad..387f5aa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Several reconnection issues.
+- Missing EKU flag evaluation.
 
 ## 1.4.2 (2019-03-05)
 
diff --git a/TunnelKit/Sources/Core/SessionProxy.swift b/TunnelKit/Sources/Core/SessionProxy.swift
index 7f139ae..6a712d9 100644
--- a/TunnelKit/Sources/Core/SessionProxy.swift
+++ b/TunnelKit/Sources/Core/SessionProxy.swift
@@ -778,7 +778,7 @@ public class SessionProxy {
                 caPath: caURL.path,
                 clientCertificatePath: (configuration.clientCertificate != nil) ? clientCertificateURL.path : nil,
                 clientKeyPath: (configuration.clientKey != nil) ? clientKeyURL.path : nil,
-                checksEKU: true
+                checksEKU: configuration.checksEKU ?? false
             )
             do {
                 try negotiationKey.tls.start()