update key usage for ts cert (sigstore#504)

asraa · mikhailswift · commit 5badadbec7d4 · 2021-12-01T18:35:10.000-05:00
Signed-off-by: Asra Ali &lt;asraa@google.com&gt;
diff --git a/pkg/signer/memory.go b/pkg/signer/memory.go
@@ -98,7 +98,7 @@ func NewTimestampingCertWithChain(ctx context.Context, pub crypto.PublicKey, sig
 		NotAfter:     time.Now().AddDate(10, 0, 0),
 		SubjectKeyId: []byte{1, 2, 3, 4, 6},
 		ExtKeyUsage:  []x509.ExtKeyUsage{x509.ExtKeyUsageTimeStamping},
-		KeyUsage:     x509.KeyUsageContentCommitment,
+		KeyUsage:     x509.KeyUsageDigitalSignature,
 		IsCA:         false,
 		ExtraExtensions: []pkix.Extension{
 			{

Original file line number	Diff line number	Diff line change
`@@ -98,7 +98,7 @@ func NewTimestampingCertWithChain(ctx context.Context, pub crypto.PublicKey, sig`
`98`	`98`	`NotAfter: time.Now().AddDate(10, 0, 0),`
`99`	`99`	`SubjectKeyId: []byte{1, 2, 3, 4, 6},`
`100`	`100`	`ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageTimeStamping},`
`101`		`- KeyUsage: x509.KeyUsageContentCommitment,`
	`101`	`+ KeyUsage: x509.KeyUsageDigitalSignature,`
`102`	`102`	`IsCA: false,`
`103`	`103`	`ExtraExtensions: []pkix.Extension{`
`104`	`104`	`{`