diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 1999-07-11 01:48:21 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 1999-07-11 01:48:21 +0000 |
| commit | f7daafa442b79952d84646b7bd5e3d368669d920 (patch) | |
| tree | ed69c992e5e821200986ca7e47f8842e9b12317c /apps | |
| parent | f8be08d200850b7046e1d9c67123b17b7e6ffd56 (diff) | |
| download | openssl-f7daafa442b79952d84646b7bd5e3d368669d920.tar.gz | |
Fix a bug in x509.c that omitted DSA parameters when they didn't match the
signers parameters. Changed it to never omit parameters.
Diffstat (limited to 'apps')
| -rw-r--r-- | apps/x509.c | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/apps/x509.c b/apps/x509.c index 3463ae6328..1024c0d3f7 100644 --- a/apps/x509.c +++ b/apps/x509.c @@ -855,18 +855,6 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest, if (X509_gmtime_adj(X509_get_notAfter(x),(long)60*60*24*days) == NULL) goto end; - /* don't save DSA parameters in child if parent has them - * and the parents and the childs are the same. */ - upkey=X509_get_pubkey(x); - if (!EVP_PKEY_missing_parameters(pkey) && - (EVP_PKEY_cmp_parameters(pkey,upkey) == 0)) - { - EVP_PKEY_save_parameters(upkey,0); - /* Force a re-write */ - X509_set_pubkey(x,upkey); - } - EVP_PKEY_free(upkey); - if(conf) { X509V3_CTX ctx2; X509_set_version(x,2); /* version 3 certificate */ |