From 6ab98629501c32341bdf45cbe7b4156af955160f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= Date: Tue, 5 Jun 2007 01:58:45 +0000 Subject: [PATCH] Add cRLSign to CA certs. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20904 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/hx509/ca.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/hx509/ca.c b/lib/hx509/ca.c index 02578a57a..33aa358c4 100644 --- a/lib/hx509/ca.c +++ b/lib/hx509/ca.c @@ -693,6 +693,7 @@ ca_sign(hx509_context context, KeyUsage ku; memset(&ku, 0, sizeof(ku)); ku.keyCertSign = 1; + ku.cRLSign = 1; key_usage |= KeyUsage2int(ku); } @@ -840,7 +841,7 @@ ca_sign(hx509_context context, } if (size != data.length) _hx509_abort("internal ASN.1 encoder error"); - ret = add_extension(context, tbsc, 1, + ret = add_extension(context, tbsc, 1, oid_id_x509_ce_keyUsage(), &data); free(data.data); if (ret)