summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorClaudio Jeker <claudio@cvs.openbsd.org>2022-02-08 12:35:15 +0000
committerClaudio Jeker <claudio@cvs.openbsd.org>2022-02-08 12:35:15 +0000
commit9d20d697e3fa98ad27edb3aba874491ecee002ab (patch)
tree7e382069e64bc109949943d8083814abda70c08d
parent7216a81ffcc5b64fff37255594db5fd19742a50a (diff)
Before loading the certificate chain for the file under inspection check
if the AKI cert is not already present. This fixes a problem when a top level MFT is displayed. Report and OK job@, OK tb@
-rw-r--r--usr.sbin/rpki-client/parser.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/usr.sbin/rpki-client/parser.c b/usr.sbin/rpki-client/parser.c
index 53f936771d4..ed8040716b4 100644
--- a/usr.sbin/rpki-client/parser.c
+++ b/usr.sbin/rpki-client/parser.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: parser.c,v 1.61 2022/02/08 11:51:51 tb Exp $ */
+/* $OpenBSD: parser.c,v 1.62 2022/02/08 12:35:14 claudio Exp $ */
/*
* Copyright (c) 2019 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
@@ -1033,7 +1033,8 @@ proc_parser_file(char *file, unsigned char *buf, size_t len)
c = x509_get_crl(x509, file);
parse_load_crl(c);
free(c);
- parse_load_certchain(aia);
+ if (auth_find(&auths, aki) == NULL)
+ parse_load_certchain(aia);
a = auth_find(&auths, aki);
crl = get_crl(a);