Fix a bug in x509.c that omitted DSA parameters when they didn't match the

[openssl.git] / apps / x509.c

diff --git a/apps/x509.c b/apps/x509.c
index 3463ae6328d3d2a75aca42a7c42b43158bdb8a8c..1024c0d3f7c3dae0b400e85f42df4ea8bb776c10 100644 (file)
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -855,18 +855,6 @@ static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
        if (X509_gmtime_adj(X509_get_notAfter(x),(long)60*60*24*days) == NULL)
                goto end;
 
-       /* don't save DSA parameters in child if parent has them
-        * and the parents and the childs are the same. */
-       upkey=X509_get_pubkey(x);
-       if (!EVP_PKEY_missing_parameters(pkey) &&
-               (EVP_PKEY_cmp_parameters(pkey,upkey) == 0))
-               {
-               EVP_PKEY_save_parameters(upkey,0);
-               /* Force a re-write */
-               X509_set_pubkey(x,upkey);
-               }
-       EVP_PKEY_free(upkey);
-
        if(conf) {
                X509V3_CTX ctx2;
                X509_set_version(x,2); /* version 3 certificate */