Add AuthorityKeyId to cloudkms root cert.

4 years ago · 89e164dad6
parent 97508ca215
commit 89e164dad6
1 changed files with 1 additions and 0 deletions
--- a/cmd/step-cloudkms-init/main.go
+++ b/cmd/step-cloudkms-init/main.go
@ -138,6 +138,7 @@ func createPKI(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
 		Subject:               pkix.Name{CommonName: "Smallstep Root"},
 		SerialNumber:          mustSerialNumber(),
 		SubjectKeyId:          mustSubjectKeyID(resp.PublicKey),
+		AuthorityKeyId:        mustSubjectKeyID(resp.PublicKey),
 	}

 	b, err := x509.CreateCertificate(rand.Reader, root, root, resp.PublicKey, signer)