Only process authority and subject key identifiers in certificates (#121

)
italiangrid · Sep 7, 2023 · 1629412 · 1629412
1 parent 9a99f20
commit 1629412
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/sslutils/proxy.c b/src/sslutils/proxy.c
@@ -353,9 +353,10 @@ struct VOMSProxy *VOMS_MakeProxy(struct VOMSProxyArguments *args, int *warning,
     }
   }
 
-  /* authority key identifier and subject key identifier extension */
+  /* authority key identifier and subject key identifier extension
+     (certificates only, not proxies) */
 
-  {
+  if (args->proxyversion == 0) {
     X509V3_CTX ctx;
 
     X509V3_set_ctx(&ctx, (args->selfsigned ? NULL : args->cert), NULL, req, NULL, 0);