set PIN function when reading a certificate

diff --git a/lib/gnutls_x509.c b/lib/gnutls_x509.c
index 51ac6724ed5e66e13c99e493d96bea4e8823ddbe..66affffffb318823084938d561faf46072004b38 100644 (file)
--- a/lib/gnutls_x509.c
+++ b/lib/gnutls_x509.c
@@ -652,7 +652,7 @@ cleanup:
 }
 
 
-/* Reads a private key from a token.
+/* Reads a certificate key from a token.
  */
 static int
 read_cert_url (gnutls_certificate_credentials_t res, const char *url)
@@ -678,6 +678,9 @@ read_cert_url (gnutls_certificate_credentials_t res, const char *url)
       goto cleanup;
     }
 
+  if (res->pin.cb)
+    gnutls_x509_crt_set_pin_function(crt, res->pin.cb, res->pin.data);
+
   ret = gnutls_x509_crt_import_pkcs11_url (crt, url, 0);
   if (ret == GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE)
     ret =