Skip to content

Instantly share code, notes, and snippets.

@thedebugger
Created December 23, 2021 05:39
Show Gist options
  • Save thedebugger/9e0337547b5c2254d9210fbbe97e2dad to your computer and use it in GitHub Desktop.
Save thedebugger/9e0337547b5c2254d9210fbbe97e2dad to your computer and use it in GitHub Desktop.
Error: Fields in the CSR were modified or removed in the signed CA certificate
gcloud privateca pools create $(CA_POOL) \
--location $(LOCATION) \
--tier devops \
--project $(PROJECT_ID) \
--issuance-policy private-ca/policy.yaml
gcloud privateca roots create $(ROOT_CA) \
--pool=$(CA_POOL) \
--location=$(LOCATION) \
--project=$(PROJECT_ID) \
--key-algorithm="ec-p384-sha384" \
--subject="CN=asm-poc-ca, O=Test LLC" \
--auto-enable
gcloud privateca pools create $(ASM_CA_POOL) \
--location=$(LOCATION) \
--tier=devops \
--project=$(PROJECT_ID) \
--issuance-policy=private-ca/policy.yaml
gcloud privateca subordinates create $(ASM_CA) \
--pool=$(ASM_CA_POOL) \
--location=$(LOCATION) \
--issuer-location=$(LOCATION) \
--project=$(PROJECT_ID) \
--issuer-pool=$(CA_POOL) \
--key-algorithm="ec-p384-sha384" \
--subject="CN=asm-intermidiate, O=Test LLC" \
--auto-enable
ERROR: (gcloud.privateca.subordinates.create) Fields in the CSR were modified or removed in the signed CA certificate:\\ndeleted: config_values.key_usage.base_key_usage.cert_sign: true\\ndeleted: config_values.key_usage.base_key_usage.crl_sign: true\\ndeleted: config_values.ca_options.is_ca.value: true\\ndeleted: config_values.ca_options.max_issuer_path_length: { }\\n
make: *** [Makefile:49: setup-ca-intermidiate] Error 1
baselineValues:
keyUsage:
baseKeyUsage:
digitalSignature: true
keyEncipherment: true
extendedKeyUsage:
serverAuth: true
clientAuth: true
caOptions:
isCa: false
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment