From 72a7e4b1cb599d8975195477638f2865ea5ecfb0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Wed, 10 Jan 2007 22:07:07 +0000
Subject: [PATCH] Make basicConstraints critical if this is a CA.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19819 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/hx509/ca.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/hx509/ca.c b/lib/hx509/ca.c
index 70fd33b70..523f90edc 100644
--- a/lib/hx509/ca.c
+++ b/lib/hx509/ca.c
@@ -678,7 +678,8 @@ ca_sign(hx509_context context,
 	}
 	if (size != data.length)
 	    _hx509_abort("internal ASN.1 encoder error");
-	ret = add_extension(context, tbsc, 0,
+	/* Critical if this is a CA */
+	ret = add_extension(context, tbsc, tbs->flags.ca,
 			    oid_id_x509_ce_basicConstraints(),
 			    &data);
 	free(data.data);