From 09f38ebe54be61236f73085eabfdd5da6951c619 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Fri, 21 May 2010 16:38:19 +0200 Subject: [PATCH] Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier --- src/libstrongswan/plugins/x509/x509_crl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/plugins/x509/x509_crl.c b/src/libstrongswan/plugins/x509/x509_crl.c index f3d5c6d73..1b0e1af8a 100644 --- a/src/libstrongswan/plugins/x509/x509_crl.c +++ b/src/libstrongswan/plugins/x509/x509_crl.c @@ -619,7 +619,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert, this->issuer = cert->get_issuer(cert); this->issuer = this->issuer->clone(this->issuer); - this->authKeyIdentifier = chunk_clone(x509->get_authKeyIdentifier(x509)); + this->authKeyIdentifier = chunk_clone(x509->get_subjectKeyIdentifier(x509)); /* select signature scheme */ this->algorithm = hasher_signature_algorithm_to_oid(digest_alg,