From 8ef971786b89e13c0989eef589f92781ca6ca9f6 Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Fri, 10 Jan 2020 11:29:21 -0600
Subject: [PATCH] bx509: Fix CSR authorizer IPC plugin bug

When marking SANs authorized, mark the SAN, not some EKU, authorized!
---
 kdc/ipc_csr_authorizer.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/kdc/ipc_csr_authorizer.c b/kdc/ipc_csr_authorizer.c
index 8ca8ec538..d271e3ee1 100644
--- a/kdc/ipc_csr_authorizer.c
+++ b/kdc/ipc_csr_authorizer.c
@@ -260,7 +260,7 @@ mark_authorized(hx509_request csr)
         hx509_san_type san_type;
         ret = hx509_request_get_san(csr, i, &san_type, &s);
         if (ret == 0)
-            hx509_request_authorize_eku(csr, i);
+            hx509_request_authorize_san(csr, i);
         frees(&s);
     }
     return ret == HX509_NO_ITEM ? 0 : ret;