Proxmox-Port/swtpm
1
0
Fork 0
mirror of https://github.com/stefanberger/swtpm.git synced 2026-02-04 03:59:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

swtpm_cert: Remove copying of authority key id

Browse Source 
Remove the copying of the authority key id from the given issuer
cert to the created cert since this copies the wrong key id and
besides that it will be set automatically when the certificate is
created.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
This commit is contained in:
Stefan Berger 2018-08-07 09:24:35 -04:00
parent f9b679597f
commit 3d35c00c52
1 changed files with 1 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/swtpm_cert/ek-cert.c
View File

@ -722,8 +722,6 @@ main(int argc, char *argv[])
uint32_t ser_number;
long int exponent = 0x10001;
bool write_pem = false;
uint8_t id[512];
size_t id_size = sizeof(id);
enum cert_type_t certtype = CERT_TYPE_EK;
const char *oid;
unsigned int key_usage;
@ -1191,16 +1189,7 @@ if (_err != GNUTLS_E_SUCCESS) { \
gnutls_free(datum.data);
datum.data = NULL;
/* 3.5.12 Authority Key Id */
err = gnutls_x509_crt_get_authority_key_id(sigcert, id, &id_size, NULL);
if (err == GNUTLS_E_SUCCESS && id_size > 0) {
err = gnutls_x509_crt_set_authority_key_id(crt, id, id_size);
CHECK_GNUTLS_ERROR(err, "Could not set the authority key id: %s\n",
gnutls_strerror(err))
} else {
CHECK_GNUTLS_ERROR(err, "Could not get the authority key id from the cert: %s\n",
gnutls_strerror(err))
}
/* 3.5.12 Authority Key Id -- automatically set */
/* 3.5.13 Authority Info Access -- may be omitted */
/* 3.5.14 CRL Distribution -- missing */