From 8659dc73f4186d18feda71ec17e3fe705c604738 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 2 May 2013 12:18:46 +0100 Subject: [PATCH] Reencode certificates in X509_sign_ctx. Reencode certificates in X509_sign_ctx as well as X509_sign. This was causing a problem in the x509 application when it modified an existing certificate. (cherry picked from commit c6d8adb8a45186617e0a8e2c09469bd164b92b31) --- crypto/x509/x_all.c | 1 + 1 file changed, 1 insertion(+) diff --git a/crypto/x509/x_all.c b/crypto/x509/x_all.c index bb64c34f50..51d23f7d62 100644 --- a/crypto/x509/x_all.c +++ b/crypto/x509/x_all.c @@ -98,6 +98,7 @@ int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md) int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx) { + x->cert_info->enc.modified = 1; return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_CINF), x->cert_info->signature, x->sig_alg, x->signature, x->cert_info, ctx); -- 2.25.1