Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier
authorMartin Willi <martin@revosec.ch>
Fri, 21 May 2010 14:38:19 +0000 (16:38 +0200)
committerMartin Willi <martin@revosec.ch>
Fri, 21 May 2010 14:38:19 +0000 (16:38 +0200)
src/libstrongswan/plugins/x509/x509_crl.c

index f3d5c6d..1b0e1af 100644 (file)
@@ -619,7 +619,7 @@ static bool generate(private_x509_crl_t *this, certificate_t *cert,
        this->issuer = cert->get_issuer(cert);
        this->issuer = this->issuer->clone(this->issuer);
 
-       this->authKeyIdentifier = chunk_clone(x509->get_authKeyIdentifier(x509));
+       this->authKeyIdentifier = chunk_clone(x509->get_subjectKeyIdentifier(x509));
 
        /* select signature scheme */
        this->algorithm = hasher_signature_algorithm_to_oid(digest_alg,