pki: Use serial of base CRL for delta CRLs

According to RFC 5280 delta CRLs and complete CRLs MUST share one
numbering sequence.
This commit is contained in:
Tobias Brunner
2016-10-11 17:18:22 +02:00
committed by Andreas Steffen
parent c72c6e9225
commit 49d9266c31
+3
View File
@@ -368,8 +368,11 @@ static int sign_crl()
lastenum = lastcrl->create_enumerator(lastcrl); lastenum = lastcrl->create_enumerator(lastcrl);
} }
else else
{
if (!crl_serial.ptr)
{ {
crl_serial = chunk_from_chars(0x00); crl_serial = chunk_from_chars(0x00);
}
lastenum = enumerator_create_empty(); lastenum = enumerator_create_empty();
} }