From 89e164dad6f2a281f074b7ea76108117d4881227 Mon Sep 17 00:00:00 2001 From: Mariano Cano Date: Tue, 19 May 2020 13:15:09 -0700 Subject: [PATCH] Add AuthorityKeyId to cloudkms root cert. --- cmd/step-cloudkms-init/main.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cmd/step-cloudkms-init/main.go b/cmd/step-cloudkms-init/main.go index a09054c4..eb23b048 100644 --- a/cmd/step-cloudkms-init/main.go +++ b/cmd/step-cloudkms-init/main.go @@ -138,6 +138,7 @@ func createPKI(c *cloudkms.CloudKMS, project, location, keyRing string, protecti Subject: pkix.Name{CommonName: "Smallstep Root"}, SerialNumber: mustSerialNumber(), SubjectKeyId: mustSubjectKeyID(resp.PublicKey), + AuthorityKeyId: mustSubjectKeyID(resp.PublicKey), } b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer)