(generate_self_signed): Load key, if generate_certificate() didn't

load or generate it, typically because it used a certificate request.
Reported by Sascha Ziemann <sascha.ziemann@secunet.com>.

diff --git a/src/certtool.c b/src/certtool.c
index 52c7a26d55e734edece30704e2a1499fc7c7f342..f292d02974bae67f79950b4261893662c37107ed 100644 (file)
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -696,6 +696,9 @@ generate_self_signed (void)
 
   crt = generate_certificate (&key, NULL);
 
+  if (!key)
+    key = load_private_key (1);
+
   uri = get_crl_dist_point_url ();
   if (uri)
     {