Reencode with X509_CRL_ctx_sign too.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 3 May 2013 11:31:47 +0000 (12:31 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 3 May 2013 12:06:18 +0000 (13:06 +0100)
(cherry picked from commit 96940f4f2d0300c033379a87db0ff19e598c6264)

crypto/x509/x_all.c

index 27dc215c756891c1c80c01297b9b88249d38cb31..e06602d65abcc05825cb9461eb31fc5f3dc4d103 100644 (file)
@@ -124,6 +124,7 @@ int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md)
 
 int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx)
        {
+       x->crl->enc.modified = 1;
        return ASN1_item_sign_ctx(ASN1_ITEM_rptr(X509_CRL_INFO),
                x->crl->sig_alg, x->sig_alg, x->signature, x->crl, ctx);
        }