search

jsha / minica

minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.
MIT License
3.02k stars 246 forks source link

Set SubjectKeyID in the CA #21

Closed FiloSottile closed 5 years ago

FiloSottile commented 5 years ago

RFC 5280 requires CAs to have SKID, but Go does not set it by default (golang/go#26676).

It's as easy as making a SHA-1 call: https://github.com/FiloSottile/mkcert/blob/fcdbc54cc34e4b2da4d01fbbbdd8cb640f23db5f/cert.go#L281