]> git.ipfire.org Git - thirdparty/openssl.git/commit
crl2pkcs7 shouldn't include empty optional sets
authorDave Coombs <dcoombs@carillon.ca>
Tue, 6 Apr 2021 16:49:21 +0000 (12:49 -0400)
committerTomas Mraz <tomas@openssl.org>
Fri, 9 Apr 2021 09:26:04 +0000 (11:26 +0200)
commitd3a5898a7f4980bc0fa6345c408f88007573c405
tree8f3034fabea90a173c5439c6d8f30579fac835be
parent4c979cbeeb9792b170670fa15e29d077597e7ee0
crl2pkcs7 shouldn't include empty optional sets

If using crl2pkcs7 -nocrl and with no -certfiles, we shouldn't include
the implicitly tagged [0] certs and [1] crls sets as they are marked
optional and would be empty.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14781)
apps/crl2p7.c