Fixed a bug in pluto's x509 handling.

This bug would have lead to a segmentation fault, if no public key could
have been extracted from a certificate.

diff --git a/src/pluto/x509.c b/src/pluto/x509.c
index d8e8879..0a29830 100644 (file)
--- a/src/pluto/x509.c
+++ b/src/pluto/x509.c
@@ -419,11 +419,11 @@ void list_x509cert_chain(const char *caption, cert_t* cert,
                                check_expiry(notAfter, CA_CERT_WARNING_INTERVAL, TRUE));
 
                        key = certificate->get_public_key(certificate);
-                       if (key);
+                       if (key)
                        {
                                whack_log(RC_COMMENT, "  pubkey:    %N %4d bits%s",
                                        key_type_names, key->get_type(key),
-                                       key->get_keysize(key) * BITS_PER_BYTE,                          
+                                       key->get_keysize(key) * BITS_PER_BYTE,
                                        cert->smartcard ? ", on smartcard" :
                                        (has_private_key(cert)? ", has private key" : ""));