Merge pull request #11285 from liggitt/ca

Use self-signed cert as CA for local-up-cluster.sh
2015-07-29 11:13:23 -07:00
parent e864569f80 5893f1c5b6
commit daa6d4dde6
2 changed files with 9 additions and 1 deletions
--- a/pkg/util/crypto.go
+++ b/pkg/util/crypto.go
@@ -53,9 +53,10 @@ func GenerateSelfSignedCert(host, certPath, keyPath string, alternateIPs []net.I
 		NotBefore: time.Now(),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 365),

-		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
 		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
 		BasicConstraintsValid: true,
+		IsCA: true,
 	}

 	if ip := net.ParseIP(host); ip != nil {