Add CRL signing key usage to CA (#69)

micromdm · Nov 4, 2017 · 0fbc95c · 0fbc95c
1 parent 5428c80
commit 0fbc95c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/scepserver/scepserver.go b/cmd/scepserver/scepserver.go
@@ -247,7 +247,7 @@ func createCertificateAuthority(key *rsa.PrivateKey, years int, organization str
 			NotBefore: time.Now().Add(-600).UTC(),
 			NotAfter:  time.Time{},
 			// Used for certificate signing only
-			KeyUsage: x509.KeyUsageCertSign,
+			KeyUsage: x509.KeyUsageCertSign | x509.KeyUsageCRLSign,
 
 			ExtKeyUsage:        nil,
 			UnknownExtKeyUsage: nil,