[go-nuts] Re: why doesn't this X509 code work?

Doh! Something stupid it was. Thanks!

Might it be reasonable to put some verification code into x509.CreateCertificate
to check that the private key used corresponds to the public key in
the signer certificate?

--

I'm trying to do a simple thing with the X509 package: generate
a root key and certificate, and use them to sign another key.

Unfortunately I can't get the verification to pass:

http://play.golang.org/p/mvLXUJl-ag

It looks like the call to encrypt in rsa.VerifyPKCS1v15 is returning
garbage, so I suspect a bad key somewhere, but I'd like to know
if I'm doing something stupid before I start peering at the standards
and delving for a bug...

Thanks for any help.

cheers,
rog.

--