From: Felix Dörre <felix@dogcraft.de>
Date: Wed, 6 Apr 2016 10:49:43 +0000 (+0200)
Subject: fix: we do not want to include issuer and serial as AKI
X-Git-Url: https://code.wpia.club/?p=cassiopeia.git;a=commitdiff_plain;h=2554cc985f2715ac9458c22e5f2970f38f8fa034

fix: we do not want to include issuer and serial as AKI
---

diff --git a/src/crypto/X509.cpp b/src/crypto/X509.cpp
index 7a4314d..1c78a51 100644
--- a/src/crypto/X509.cpp
+++ b/src/crypto/X509.cpp
@@ -177,7 +177,7 @@ merr:
 void X509Cert::setExtensions( std::shared_ptr<X509> caCert, std::vector<std::shared_ptr<SAN>>& sans, Profile& prof, std::string crlURL, std::string crtURL ) {
     add_ext( caCert, target, NID_basic_constraints, "critical,CA:FALSE" );
     add_ext( caCert, target, NID_subject_key_identifier, "hash" );
-    add_ext( caCert, target, NID_authority_key_identifier, "keyid,issuer:always" );
+    add_ext( caCert, target, NID_authority_key_identifier, "keyid:always" );
     std::string ku = std::string( "critical," ) + prof.ku;
     add_ext( caCert, target, NID_key_usage, ku.c_str() );
     add_ext( caCert, target, NID_ext_key_usage, prof.eku.c_str() );