From 86f308d7d10ba13e0ba6c84e7f48f82e1841f8c4 Mon Sep 17 00:00:00 2001
From: Carlos Monastyrski <charly.monastyrski@gmail.com>
Date: Fri, 7 Nov 2025 18:24:18 -0300
Subject: [PATCH] Fix CSR KU/EKU check

---
 .../certificate-template-v2-service.ts                   | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/backend/src/services/certificate-template-v2/certificate-template-v2-service.ts b/backend/src/services/certificate-template-v2/certificate-template-v2-service.ts
index 0046ae0e5..656c12e64 100644
--- a/backend/src/services/certificate-template-v2/certificate-template-v2-service.ts
+++ b/backend/src/services/certificate-template-v2/certificate-template-v2-service.ts
@@ -482,7 +482,7 @@ export const certificateTemplateV2ServiceFactory = ({
       }
 
       // Check ALLOWED key usages - if present, all usages must be in allowed list
-      if (request.keyUsages && keyUsagePolicy && keyUsagePolicy.allowed && keyUsagePolicy.allowed.length > 0) {
+      if (request.keyUsages && keyUsagePolicy) {
         const allAllowedUsages = [...(keyUsagePolicy.required || []), ...(keyUsagePolicy.allowed || [])];
         const invalidUsages = request.keyUsages.filter((usage) => !allAllowedUsages.includes(usage));
         if (invalidUsages.length > 0) {
@@ -517,12 +517,7 @@ export const certificateTemplateV2ServiceFactory = ({
       }
 
       // Check ALLOWED extended key usages - if present, all usages must be in allowed list
-      if (
-        request.extendedKeyUsages &&
-        extendedKeyUsagePolicy &&
-        extendedKeyUsagePolicy.allowed &&
-        extendedKeyUsagePolicy.allowed.length > 0
-      ) {
+      if (request.extendedKeyUsages && extendedKeyUsagePolicy) {
         const allAllowedExtendedUsages = [
           ...(extendedKeyUsagePolicy.required || []),
           ...(extendedKeyUsagePolicy.allowed || [])