environs/ec2: make tests pass on quantal

cert/cert.go

 package cert
 
 import (
         "crypto/rand"
         "crypto/rsa"
         "crypto/sha1"
         "crypto/tls"
         "crypto/x509"
         "crypto/x509/pkix"
         "encoding/pem"
@@ skipping 76 matching lines @@
                 Subject: pkix.Name{
                         // TODO quote the environment name when we start using
                         // Go version 1.1. See Go issue 3791.
                         CommonName:   fmt.Sprintf("juju-generated CA for environment %s", envName),
                         Organization: []string{"juju"},
                 },
                 NotBefore:             now.UTC().Add(-5 * time.Minute),
                 NotAfter:              expiry.UTC(),
                 SubjectKeyId:          bigIntHash(key.N),
                 KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
-                BasicConstraintsValid: true,
                 IsCA:                  true,
                 MaxPathLen:            0, // Disallow delegation for now.
+                BasicConstraintsValid: true,
         }
         certDER, err := x509.CreateCertificate(rand.Reader, template, template, &key.PublicKey, key)
         if err != nil {
                 return nil, nil, fmt.Errorf("canot create certificate: %v", err)
         }
         certPEM = pem.EncodeToMemory(&pem.Block{
                 Type:  "CERTIFICATE",
                 Bytes: certDER,
         })
         keyPEM = pem.EncodeToMemory(&pem.Block{
@@ skipping 56 matching lines @@
                 Bytes: x509.MarshalPKCS1PrivateKey(key),
         })
         return certPEM, keyPEM, nil
 }
 
 func bigIntHash(n *big.Int) []byte {
         h := sha1.New()
         h.Write(n.Bytes())
         return h.Sum(nil)
 }