bx509d: Use /get-tgt lifetime q-param

2021-05-06 23:13:24 -05:00
parent 5aaf12351a
commit 8807a0aad9
3 changed files with 94 additions and 1 deletions
--- a/kdc/bx509d.c
+++ b/kdc/bx509d.c
@@ -1327,7 +1327,7 @@ k5_do_CA(struct bx509_request_desc *r)
    /* Issue the certificate */
    if (ret == 0)
        ret = kdc_issue_certificate(r->context, "get-tgt", logfac, req, p,
-                                    &r->token_times, 0,
+                                    &r->token_times, r->req_life,
                                    1 /* send_chain */, &certs);
    krb5_free_principal(r->context, p);
    hx509_request_free(&req);