Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier

diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c
index f3d5c6d73a24951f7a3cefb69fbbdff701802599..1b0e1af8a58f57ddf8604b8177d408e78a09d1df 100644 (file)
--- a/src/libstrongswan/plugins/x509/x509_crl.c
+++ b/src/libstrongswan/plugins/x509/x509_crl.c
@@ -619,7 +619,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert,
        this->issuer = cert->get_issuer(cert);
        this->issuer = this->issuer->clone(this->issuer);
 
-       this->authKeyIdentifier = chunk_clone(x509->get_authKeyIdentifier(x509));
+       this->authKeyIdentifier = chunk_clone(x509->get_subjectKeyIdentifier(x509));
 
        /* select signature scheme */
        this->algorithm = hasher_signature_algorithm_to_oid(digest_alg,