From 4525233b1e27fc7f913e379caa96e53f753269e9 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 20 Jan 2021 15:52:33 +0100
Subject: [PATCH] vici: Fix refcount for CA certificates when reloading
 authority sections

Fixes: 3c5e7eaa88b0 ("vici: Keep track of all CA certificates in vici_authority_t")
---
 src/libcharon/plugins/vici/vici_authority.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/libcharon/plugins/vici/vici_authority.c b/src/libcharon/plugins/vici/vici_authority.c
index 08f6ce5c7..fac9f615e 100644
--- a/src/libcharon/plugins/vici/vici_authority.c
+++ b/src/libcharon/plugins/vici/vici_authority.c
@@ -547,6 +547,8 @@ CALLBACK(authority_sn, bool,
 		{
 			/* remove the old authority definition */
 			authorities->remove_at(authorities, enumerator);
+			request->this->certs->remove(request->this->certs, authority->cert,
+										 remove_cert);
 			authority_destroy(authority);
 			break;
 		}