oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add cRLSign to CA certs.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20904 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-05 01:58:45 +00:00
parent 337ff1cf7f
commit 6ab9862950
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/hx509/ca.c
View File

@@ -693,6 +693,7 @@ ca_sign(hx509_context context,
KeyUsage ku; KeyUsage ku;
memset(&ku, 0, sizeof(ku)); memset(&ku, 0, sizeof(ku));
ku.keyCertSign = 1; ku.keyCertSign = 1;
ku.cRLSign = 1;
key_usage |= KeyUsage2int(ku); key_usage |= KeyUsage2int(ku);
} }
@@ -840,7 +841,7 @@ ca_sign(hx509_context context,
} }
if (size != data.length) if (size != data.length)
_hx509_abort("internal ASN.1 encoder error"); _hx509_abort("internal ASN.1 encoder error");
ret = add_extension(context, tbsc, 1, ret = add_extension(context, tbsc, 1,
oid_id_x509_ce_keyUsage(), &data); oid_id_x509_ce_keyUsage(), &data);
free(data.data); free(data.data);
if (ret) if (ret)