apps/x509: Fix -CAfile option being neglected with -new or -in

Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Hugo Landau <hlandau@openssl.org> (Merged from #18373) (cherry picked from commit 10c7887)
openssl · Jul 14, 2022 · fcdd41f · fcdd41f
1 parent 56f7697
commit fcdd41f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/apps/x509.c b/apps/x509.c
@@ -725,7 +725,7 @@ int x509_main(int argc, char **argv)
         }
         if ((x = X509_new_ex(app_get0_libctx(), app_get0_propq())) == NULL)
             goto end;
-        if (sno == NULL) {
+        if (CAfile == NULL && sno == NULL) {
             sno = ASN1_INTEGER_new();
             if (sno == NULL || !rand_serial(NULL, sno))
                 goto end;