Use self-signed cert as CA for local-up-cluster.sh

2015-07-14 23:57:36 -04:00
parent b459b796b6
commit 5893f1c5b6
2 changed files with 9 additions and 1 deletions
--- a/pkg/util/crypto.go
+++ b/pkg/util/crypto.go
@@ -53,9 +53,10 @@ func GenerateSelfSignedCert(host, certPath, keyPath string, alternateIPs []net.I
 		NotBefore: time.Now(),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 365),

-		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
 		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		BasicConstraintsValid: true,
+		IsCA: true,
 	}

 	if ip := net.ParseIP(host); ip != nil {