x509: Don't include authKeyIdentifier in self-signed certificates

As the comment indicates this was the intention in
d7be2906433a7dcfefc1fd732587865688dbfe1b all along.
This commit is contained in:
Tobias Brunner 2014-04-09 15:28:54 +02:00
parent 3f3680ec3f
commit f7d04ba6c4

View File

@ -2174,7 +2174,7 @@ static bool generate(private_x509_cert_t *cert, certificate_t *sign_cert,
}
/* add the keyid authKeyIdentifier for non self-signed certificates */
if (sign_key)
if (sign_cert)
{
chunk_t keyid;