From 1473b96d1c5c7242c44b290614e14ec2bb756d0c Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Tue, 3 Jan 2023 20:40:02 -0600
Subject: [PATCH] hx509: Fix leak in templated certificates

---
 lib/hx509/ca.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/hx509/ca.c b/lib/hx509/ca.c
index d3a884db6..1ca8d51da 100644
--- a/lib/hx509/ca.c
+++ b/lib/hx509/ca.c
@@ -2613,7 +2613,6 @@ set_template(hx509_context context,
                                            "template_cert", NULL);
     subj_name = heim_config_get_string(context->hcontext, cf, "subject_name",
                                        NULL);
-    ekus = heim_config_get_strings(context->hcontext, cf, "ekus", NULL);
 
     if (cert_template) {
         hx509_certs certs;
@@ -2669,6 +2668,7 @@ set_template(hx509_context context,
             return ret;
     }
 
+    ekus = heim_config_get_strings(context->hcontext, cf, "ekus", NULL);
     if (ekus) {
         size_t i;