X-Git-Url: http://www.git.cypherpunks.ru/?a=blobdiff_plain;f=cmd%2Fcer-selfsigned-example%2Fmain.go;h=8b79359f2a63a7426ce3f67aed5c2da7218c26c9;hb=9252439816bb983e9754a011cd9fe19f737df04d;hp=f859f8d60b2f05472712c51394689345620c6102;hpb=cbf2e9df315b52e968c304d54371b57c6a40ec32;p=gogost.git

diff --git a/cmd/cer-selfsigned-example/main.go b/cmd/cer-selfsigned-example/main.go
index f859f8d..8b79359 100644
--- a/cmd/cer-selfsigned-example/main.go
+++ b/cmd/cer-selfsigned-example/main.go
@@ -191,7 +191,6 @@ func main() {
 	spki = spki[:20]
 
 	cerTmpl := x509.Certificate{
-		KeyUsage:           x509.KeyUsageDigitalSignature,
 		NotBefore:          notBefore,
 		NotAfter:           notAfter,
 		SerialNumber:       sn,
@@ -200,10 +199,12 @@ func main() {
 		SubjectKeyId:       spki,
 	}
 	if *ca {
+		cerTmpl.BasicConstraintsValid = true
 		cerTmpl.IsCA = true
-		cerTmpl.KeyUsage |= x509.KeyUsageCertSign
+		cerTmpl.KeyUsage = x509.KeyUsageCertSign
 	} else {
 		cerTmpl.DNSNames = []string{*cn}
+		cerTmpl.KeyUsage = x509.KeyUsageDigitalSignature
 	}
 
 	if caCer == nil {