x509: Don't include authKeyIdentifier in self-signed certificates
As the comment indicates this was the intention in
d7be290643 all along.
This commit is contained in:
@@ -2174,7 +2174,7 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert,
|
|||||||
}
|
}
|
||||||
|
|
||||||
/* add the keyid authKeyIdentifier for non self-signed certificates */
|
/* add the keyid authKeyIdentifier for non self-signed certificates */
|
||||||
if (sign_key)
|
if (sign_cert)
|
||||||
{
|
{
|
||||||
chunk_t keyid;
|
chunk_t keyid;
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user