From 89e164dad6f2a281f074b7ea76108117d4881227 Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano@smallstep.com>
Date: Tue, 19 May 2020 13:15:09 -0700
Subject: [PATCH] Add AuthorityKeyId to cloudkms root cert.
---
cmd/step-cloudkms-init/main.go | 1 +
1 file changed, 1 insertion(+)
diff --git a/cmd/step-cloudkms-init/main.go b/cmd/step-cloudkms-init/main.go
index a09054c4..eb23b048 100644
--- a/cmd/step-cloudkms-init/main.go
+++ b/cmd/step-cloudkms-init/main.go
@@ -138,6 +138,7 @@ func createPKI(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
Subject: pkix.Name{CommonName: "Smallstep Root"},
SerialNumber: mustSerialNumber(),
SubjectKeyId: mustSubjectKeyID(resp.PublicKey),
+ AuthorityKeyId: mustSubjectKeyID(resp.PublicKey),
}
b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer)