Add AuthorityKeyId to cloudkms root cert.

This commit is contained in:
Mariano Cano 2020-05-19 13:15:09 -07:00
parent 97508ca215
commit 89e164dad6

View file

@ -138,6 +138,7 @@ func createPKI(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
Subject: pkix.Name{CommonName: "Smallstep Root"}, Subject: pkix.Name{CommonName: "Smallstep Root"},
SerialNumber: mustSerialNumber(), SerialNumber: mustSerialNumber(),
SubjectKeyId: mustSubjectKeyID(resp.PublicKey), SubjectKeyId: mustSubjectKeyID(resp.PublicKey),
AuthorityKeyId: mustSubjectKeyID(resp.PublicKey),
} }
b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer) b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer)