diff options
| author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2019-12-14 10:51:48 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2019-12-23 19:54:48 +0100 |
| commit | c35490f0a3d01aeb387c2de127110c8b1ec3c750 (patch) | |
| tree | 1b084c98e0b3e72a5df8f1c29d39e72ec56a2534 /src | |
| parent | 2923c812cc054bbbb376433d5ca9021d19ebf804 (diff) | |
| download | gnutls-c35490f0a3d01aeb387c2de127110c8b1ec3c750.tar.gz | |
certtool: always set extensions from template
Previously we would only set these extensions specific with add_extension
when generating using --generate-certificate. The change makes sure these
options are considered even when generating an extension from a certificate
request. Issue reported on the mailing list.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Diffstat (limited to 'src')
| -rw-r--r-- | src/certtool.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/certtool.c b/src/certtool.c index 447f02f765..35438daafa 100644 --- a/src/certtool.c +++ b/src/certtool.c @@ -373,7 +373,6 @@ generate_certificate(gnutls_privkey_t * ret_key, get_oid_crt_set(crt); get_key_purpose_set(TYPE_CRT, crt); - get_extensions_crt_set(TYPE_CRT, crt); if (!batch) fprintf(stderr, @@ -467,6 +466,8 @@ generate_certificate(gnutls_privkey_t * ret_key, } } + get_extensions_crt_set(TYPE_CRT, crt); + /* append additional extensions */ if (cinfo->v1_cert == 0) { |