From 5821f2cc0164f2731e039260a16408f2b307e19c Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 22 Jun 2021 10:35:10 +0200
Subject: [PATCH] pubkey: Ignore X.509 flags passed to the parser

---
 src/libstrongswan/plugins/pubkey/pubkey_cert.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/libstrongswan/plugins/pubkey/pubkey_cert.c b/src/libstrongswan/plugins/pubkey/pubkey_cert.c
index 68866d2ad..177785865 100644
--- a/src/libstrongswan/plugins/pubkey/pubkey_cert.c
+++ b/src/libstrongswan/plugins/pubkey/pubkey_cert.c
@@ -17,6 +17,7 @@
 
 #include <time.h>
 
+#include <credentials/certificates/x509.h>
 #include <utils/debug.h>
 
 typedef struct private_pubkey_cert_t private_pubkey_cert_t;
@@ -291,6 +292,10 @@ pubkey_cert_t *pubkey_cert_wrap(certificate_type_t type, va_list args)
 			case BUILD_SUBJECT:
 				subject = va_arg(args, identification_t*);
 				continue;
+			case BUILD_X509_FLAG:
+				/* just ignore the flags */
+				va_arg(args, x509_flag_t);
+				continue;
 			case BUILD_END:
 				break;
 			default:
@@ -313,4 +318,3 @@ pubkey_cert_t *pubkey_cert_wrap(certificate_type_t type, va_list args)
 	}
 	return NULL;
 }
-