diff options
| author | Claudio Jeker <claudio@cvs.openbsd.org> | 2022-02-08 12:35:15 +0000 |
|---|---|---|
| committer | Claudio Jeker <claudio@cvs.openbsd.org> | 2022-02-08 12:35:15 +0000 |
| commit | 9d20d697e3fa98ad27edb3aba874491ecee002ab (patch) | |
| tree | 7e382069e64bc109949943d8083814abda70c08d /usr.sbin | |
| parent | 7216a81ffcc5b64fff37255594db5fd19742a50a (diff) | |
Before loading the certificate chain for the file under inspection check
if the AKI cert is not already present. This fixes a problem when a top
level MFT is displayed.
Report and OK job@, OK tb@
Diffstat (limited to 'usr.sbin')
| -rw-r--r-- | usr.sbin/rpki-client/parser.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/usr.sbin/rpki-client/parser.c b/usr.sbin/rpki-client/parser.c index 53f936771d4..ed8040716b4 100644 --- a/usr.sbin/rpki-client/parser.c +++ b/usr.sbin/rpki-client/parser.c @@ -1,4 +1,4 @@ -/* $OpenBSD: parser.c,v 1.61 2022/02/08 11:51:51 tb Exp $ */ +/* $OpenBSD: parser.c,v 1.62 2022/02/08 12:35:14 claudio Exp $ */ /* * Copyright (c) 2019 Claudio Jeker <claudio@openbsd.org> * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv> @@ -1033,7 +1033,8 @@ proc_parser_file(char *file, unsigned char *buf, size_t len) c = x509_get_crl(x509, file); parse_load_crl(c); free(c); - parse_load_certchain(aia); + if (auth_find(&auths, aki) == NULL) + parse_load_certchain(aia); a = auth_find(&auths, aki); crl = get_crl(a); |