diff options
| author | Martin Willi <martin@revosec.ch> | 2010-12-23 14:50:04 +0100 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2011-01-05 16:46:06 +0100 |
| commit | 0110c26a04445efc0f761ad4bfa24b3ba9bb8856 (patch) | |
| tree | 5ee31e799457a9f7f746873e9c2c402e313d7064 /src | |
| parent | 2e90006f969f34dd149072490af0c45682b78928 (diff) | |
| download | strongswan-0110c26a04445efc0f761ad4bfa24b3ba9bb8856.tar.bz2 strongswan-0110c26a04445efc0f761ad4bfa24b3ba9bb8856.tar.xz | |
Use incremented serial of base CRL when signing delta CRL
Diffstat (limited to 'src')
| -rw-r--r-- | src/pki/commands/signcrl.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/pki/commands/signcrl.c b/src/pki/commands/signcrl.c index 07f4a1343..4b1c12e5c 100644 --- a/src/pki/commands/signcrl.c +++ b/src/pki/commands/signcrl.c @@ -332,6 +332,8 @@ static int sign_crl() error = "loading base CRL failed"; goto error; } + memcpy(crl_serial, lastcrl->get_serial(lastcrl).ptr, + min(lastcrl->get_serial(lastcrl).len, sizeof(crl_serial))); baseCrlNumber = chunk_clone(lastcrl->get_serial(lastcrl)); DESTROY_IF((certificate_t*)lastcrl); lastcrl = NULL; |