]> git.ipfire.org Git - thirdparty/strongswan.git/commit
x509: Fix regression introduced by commit a22147a
authorAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 14 Nov 2023 07:00:27 +0000 (08:00 +0100)
committerAndreas Steffen <andreas.steffen@strongswan.org>
Tue, 14 Nov 2023 07:00:27 +0000 (08:00 +0100)
commit6941dcb17aa5fb51b6fe7831794a4c3593480c3c
treedc8bccc410c3002cec2b4f45cca60019103393f0
parenta1224b6c8071d64fca0928c316b7bdb739901cd2
x509: Fix regression introduced by commit a22147a

Instead of the CA certificate's subjectKeyIdentifier erroneously
the CA's authorityKeyIdentifier was used as the authorityKeyIdentfier
of the certificate to be issued. This might work with a root CA
where the authorityKeyIdentifier equals its subjectKeyIdentfier
but introduces a severe regression when an intermediate CA is used.
src/libstrongswan/plugins/x509/x509_cert.c