CVSROOT: /cvs Module name: src Changes by: [email protected] 2014/11/16 17:21:40
Modified files:
usr.bin/ssh : krl.c
regress/usr.bin/ssh: krl.sh
Log message:
fix KRL generation when multiple CAs are in use
We would generate an invalid KRL when revoking certs by serial
number for multiple CA keys due to a section being written out
twice.
Also extend the regress test to catch this case by having it
produce a multi-CA KRL.
Reported by peter AT pean.org
