summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2013-05-02 12:18:46 +0100
committerDr. Stephen Henson <steve@openssl.org>2013-05-02 12:24:33 +0100
commit8659dc73f4186d18feda71ec17e3fe705c604738 (patch)
treece7920d9759045abc70cb62165e5f9f298408fa0
parent07464787a894794be54142fe71da9df782c932af (diff)
Reencode certificates in X509_sign_ctx.
Reencode certificates in X509_sign_ctx as well as X509_sign. This was causing a problem in the x509 application when it modified an existing certificate. (cherry picked from commit c6d8adb8a45186617e0a8e2c09469bd164b92b31)
-rw-r--r--crypto/x509/x_all.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/x509/x_all.c b/crypto/x509/x_all.c
index bb64c34f50..51d23f7d62 100644
--- a/crypto/x509/x_all.c
+++ b/crypto/x509/x_all.c
@@ -98,6 +98,7 @@ int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md)
int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx)
{
+ x->cert_info->enc.modified = 1;
return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_CINF),
x->cert_info->signature,
x->sig_alg, x->signature, x->cert_info, ctx);