Use subject, not issuer, of CRL issuing certificate

diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c
index 9a0010299fec7ed06273cf630d5958ea3a384b11..ef5821ac2c4ebc409baae97ed3a18b2950fdc502 100644 (file)
--- a/src/libstrongswan/plugins/x509/x509_crl.c
+++ b/src/libstrongswan/plugins/x509/x509_crl.c
@@ -625,7 +625,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert,
 
        x509 = (x509_t*)cert;
 
-       this->issuer = cert->get_issuer(cert);
+       this->issuer = cert->get_subject(cert);
        this->issuer = this->issuer->clone(this->issuer);
 
        this->authKeyIdentifier = chunk_clone(x509->get_subjectKeyIdentifier(x509));