diff --git a/smx509/x509.go b/smx509/x509.go index 9e090ab..a685f63 100644 --- a/smx509/x509.go +++ b/smx509/x509.go @@ -1889,12 +1889,18 @@ func CreateCertificate(rand io.Reader, template, parent *x509.Certificate, pub, type privateKey interface { Equal(crypto.PublicKey) bool } - if privPub, ok := key.Public().(privateKey); !ok { - return nil, errors.New("x509: internal error: supported public key does not implement Equal") - } else if parent.PublicKey != nil && !privPub.Equal(parent.PublicKey) { + + /* + if privPub, ok := key.Public().(privateKey); !ok { + return nil, errors.New("x509: internal error: supported public key does not implement Equal") + } else if parent.PublicKey != nil && !privPub.Equal(parent.PublicKey) { + return nil, errors.New("x509: provided PrivateKey doesn't match parent's PublicKey") + } + */ + if privPub, ok := key.Public().(privateKey); ok && parent.PublicKey != nil && !privPub.Equal(parent.PublicKey) { return nil, errors.New("x509: provided PrivateKey doesn't match parent's PublicKey") } - + extensions, err := buildExtensions(template, bytes.Equal(asn1Subject, emptyASN1Subject), authorityKeyId) if err != nil { return nil, err