Set RawSubject, not Subject, for intermediate CAs

square · May 3, 2016 · d1f5850 · d1f5850
1 parent 4bf13f7
commit d1f5850
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkix/cert_auth.go b/pkix/cert_auth.go
@@ -127,7 +127,8 @@ func CreateIntermediateCertificateAuthority(crtAuth *Certificate, keyAuth *Key,
 		return nil, err
 	}
 
-	authTemplate.Subject = rawCsr.Subject
+	authTemplate.Subject = nil
+	authTemplate.RawSubject = rawCsr.RawSubject
 
 	caExpiry := time.Now().Add(crtAuth.GetExpirationDuration())
 	proposedExpiry := time.Now().AddDate(years, 0, 0).UTC()