#8

修改certstorre填充默认密钥用法为(digitalSignature、keyEncipherment)
2019-06-22 00:25:28 +08:00
parent c98f442d04
commit 5e684f980b
1 changed files with 3 additions and 6 deletions
--- a/src/cert_session.c
+++ b/src/cert_session.c
@@ -500,12 +500,9 @@ x509_modify_by_cert(X509 *cacrt, EVP_PKEY *cakey, X509 *origcrt, char *pkey,
 	if (rv == -1)
 		goto errout;
-	rv = ssl_x509_v3ext_copy_by_nid(crt, origcrt,
+	rv = ssl_x509_v3ext_add(&ctx, crt, "keyUsage",
-	                                NID_key_usage);
+		                               "digitalSignature,"
-	if (rv == 0)
+		                               "keyEncipherment");
 		rv = ssl_x509_v3ext_add(&ctx, crt, "keyUsage",
 		                                   "digitalSignature,"
 		                                   "keyEncipherment");
 	if (rv == -1)
 		goto errout;