allow authority key identifier to be NULL, as seen on EL9 with CILogo…

…n client cert
italiangrid · Sep 6, 2023 · 84476ff · 84476ff
1 parent 92cbea9
commit 84476ff
Showing 1 changed file with 3 additions and 6 deletions.
diff --git a/src/sslutils/proxy.c b/src/sslutils/proxy.c
@@ -366,13 +366,10 @@ struct VOMSProxy *VOMS_MakeProxy(struct VOMSProxyArguments *args, int *warning,
       ex11 = X509V3_EXT_conf_nid(NULL, &ctx, NID_authority_key_identifier, "keyid");
     }
 
-    if (!ex11) {
-      PRXYerr(PRXYERR_F_PROXY_SIGN,PRXYERR_R_CLASS_ADD_EXT);
-      goto err;
+    if (ex11) {
+      if (!SET_EXT(ex11))
+        goto err;
     }
-
-    if (!SET_EXT(ex11))
-      goto err;
   }
 
   /* class_add extension */