From 0110c26a04445efc0f761ad4bfa24b3ba9bb8856 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Thu, 23 Dec 2010 14:50:04 +0100
Subject: [PATCH] Use incremented serial of base CRL when signing delta CRL

---
 src/pki/commands/signcrl.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/pki/commands/signcrl.c b/src/pki/commands/signcrl.c
index 07f4a1343..4b1c12e5c 100644
--- a/src/pki/commands/signcrl.c
+++ b/src/pki/commands/signcrl.c
@@ -332,6 +332,8 @@ static int sign_crl()
 			error = "loading base CRL failed";
 			goto error;
 		}
+		memcpy(crl_serial, lastcrl->get_serial(lastcrl).ptr,
+			   min(lastcrl->get_serial(lastcrl).len, sizeof(crl_serial)));
 		baseCrlNumber = chunk_clone(lastcrl->get_serial(lastcrl));
 		DESTROY_IF((certificate_t*)lastcrl);
 		lastcrl = NULL;