diff options
| author | Rob Austein <sra@hactrn.net> | 2012-10-17 02:57:38 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2012-10-17 02:57:38 +0000 |
| commit | 1466c6dcb935faf3301c6d47c846d16982051f0d (patch) | |
| tree | 3851bc7b958d8d4c6755566d64ab566ac38fd2a1 /rpkid | |
| parent | 008532eb628953028af9ef8df7d311c7f09c1e16 (diff) | |
CRLs work better if one remembers to set the list of certificates
being revoked. Doh. Fixes #295.
svn path=/branches/tk274/; revision=4780
Diffstat (limited to 'rpkid')
| -rw-r--r-- | rpkid/rpki/x509.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/rpkid/rpki/x509.py b/rpkid/rpki/x509.py index 5eca40ce..6aa6adea 100644 --- a/rpkid/rpki/x509.py +++ b/rpkid/rpki/x509.py @@ -1802,6 +1802,8 @@ class CRL(DER_object): crl.setNextUpdate(nextUpdate.toGeneralizedTime()) crl.setAKI(issuer.get_SKI()) crl.setCRLNumber(serial) + crl.addRevocations((r[0], r[1].toGeneralizedTime()) + for r in revokedCertificates) crl.sign(keypair.get_POW()) return cls(POW = crl) |