Oops! Get the pmatch test the right way round.

diff --git a/apps/pkcs12.c b/apps/pkcs12.c
index 8ead8bc4aa10b680a2b59bbab9889c3a0a04ed27..6a70d9b47c673a1318bf8e77a6b10e0ba350af48 100644 (file)
--- a/apps/pkcs12.c
+++ b/apps/pkcs12.c
@@ -398,7 +398,7 @@ if (export_cert) {
                        cpass, -1, NULL, 0, iter, p8);
        PKCS8_PRIV_KEY_INFO_free(p8);
         if (name) PKCS12_add_friendlyname (bag, name, -1);
-       if(!pmatch) PKCS12_add_localkeyid (bag, keyid, keyidlen);
+       if(pmatch) PKCS12_add_localkeyid (bag, keyid, keyidlen);
        bags = sk_new(NULL);
        sk_push (bags, (char *)bag);
        /* Turn it into unencrypted safe bag */