Consider the Authority Key Id extension only if it's available (#113)

italiangrid · Sep 7, 2023 · 6a08378 · 6a08378
1 parent 1629412
commit 6a08378
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/src/sslutils/proxy.c b/src/sslutils/proxy.c
@@ -390,14 +390,14 @@ struct VOMSProxy *VOMS_MakeProxy(struct VOMSProxyArguments *args, int *warning,
       ex11 = X509V3_EXT_conf_nid(NULL, &ctx, NID_authority_key_identifier, "keyid");
     }
 
-    if (!ex11) {
+    if (ex11) {
+      if (!SET_EXT(ex11)) {
+        goto err;
+      }
+    } else if (args->selfsigned) {
       PRXYerr(PRXYERR_F_PROXY_SIGN,PRXYERR_R_CLASS_ADD_EXT);
       goto err;
     }
-
-    if (!SET_EXT(ex11)) {
-      goto err;
-    }
   }
 
   /* class_add extension */