From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 20 May 2020 13:25:51 +0000 (+0200)
Subject: vici: Make attribute certificates untrusted again
X-Git-Tag: 5.9.0rc1~8^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d8a2c58229db8095160dccebde3c3d3143ac47e1;p=thirdparty%2Fstrongswan.git

vici: Make attribute certificates untrusted again

Fixes: 334119b843d7 ("Share vici_cert_info.c with vici_cred.c")
---

diff --git a/src/libcharon/plugins/vici/vici_cred.c b/src/libcharon/plugins/vici/vici_cred.c
index 038338805b..365cce8faa 100644
--- a/src/libcharon/plugins/vici/vici_cred.c
+++ b/src/libcharon/plugins/vici/vici_cred.c
@@ -135,7 +135,6 @@ CALLBACK(load_cert, vici_message_t*,
 	x509_flag_t ext_flag, flag = X509_NONE;
 	x509_t *x509;
 	chunk_t data;
-	bool trusted = TRUE;
 	char *str;
 
 	str = message->get_str(message, NULL, "type");
@@ -198,7 +197,7 @@ CALLBACK(load_cert, vici_message_t*,
 	}
 	else
 	{
-		this->creds->add_cert(this->creds, trusted, cert);
+		this->creds->add_cert(this->creds, type != CERT_X509_AC, cert);
 	}
 	return create_reply(NULL);
 }