From 2554cc985f2715ac9458c22e5f2970f38f8fa034 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Felix=20D=C3=B6rre?= Date: Wed, 6 Apr 2016 12:49:43 +0200 Subject: [PATCH] fix: we do not want to include issuer and serial as AKI --- src/crypto/X509.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/crypto/X509.cpp b/src/crypto/X509.cpp index 7a4314d..1c78a51 100644 --- a/src/crypto/X509.cpp +++ b/src/crypto/X509.cpp @@ -177,7 +177,7 @@ merr: void X509Cert::setExtensions( std::shared_ptr caCert, std::vector>& sans, Profile& prof, std::string crlURL, std::string crtURL ) { add_ext( caCert, target, NID_basic_constraints, "critical,CA:FALSE" ); add_ext( caCert, target, NID_subject_key_identifier, "hash" ); - add_ext( caCert, target, NID_authority_key_identifier, "keyid,issuer:always" ); + add_ext( caCert, target, NID_authority_key_identifier, "keyid:always" ); std::string ku = std::string( "critical," ) + prof.ku; add_ext( caCert, target, NID_key_usage, ku.c_str() ); add_ext( caCert, target, NID_ext_key_usage, prof.eku.c_str() ); -- 2.47.3