oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

bx509: Fix CSR authorizer IPC plugin bug

Browse Source 
When marking SANs authorized, mark the SAN, not some EKU, authorized!
This commit is contained in:
Nicolas Williams
2020-01-10 11:29:21 -06:00
parent 2b92d938ae
commit 8ef971786b
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kdc/ipc_csr_authorizer.c
View File

@@ -260,7 +260,7 @@ mark_authorized(hx509_request csr)
hx509_san_type san_type; hx509_san_type san_type;
ret = hx509_request_get_san(csr, i, &san_type, &s); ret = hx509_request_get_san(csr, i, &san_type, &s);
if (ret == 0) if (ret == 0)
hx509_request_authorize_eku(csr, i); hx509_request_authorize_san(csr, i);
frees(&s); frees(&s);
} }
return ret == HX509_NO_ITEM ? 0 : ret; return ret == HX509_NO_ITEM ? 0 : ret;