Added root signing key usage.
Ylian Saint-Hilaire committed
Nov 14, 2019 at 15:30 UTC
b7500428236a27a0bd6ba50b0f91d2269e6c1931
1 file changed
+1
-1
certoperations.js
+1
-1
@@ -313,7 +313,7 @@ module.exports.CertificateOperations = function (parent) {
313
cert.setIssuer(attrs);
314
// Create a root certificate
315
//cert.setExtensions([{ name: "basicConstraints", cA: true }, { name: "nsCertType", sslCA: true, emailCA: true, objCA: true }, { name: "subjectKeyIdentifier" }]);
316
- cert.setExtensions([{ name: "basicConstraints", cA: true }, { name: "subjectKeyIdentifier" }]);
316
+ cert.setExtensions([{ name: "basicConstraints", cA: true }, { name: "subjectKeyIdentifier" }, { name: "keyUsage", keyCertSign: true }]);
317
cert.sign(keys.privateKey, obj.forge.md.sha384.create());
318
319
return { cert: cert, key: keys.privateKey };