aboutsummaryrefslogtreecommitdiff
path: root/scripts/rpki/x509.py
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/rpki/x509.py')
-rw-r--r--scripts/rpki/x509.py6
1 files changed, 5 insertions, 1 deletions
diff --git a/scripts/rpki/x509.py b/scripts/rpki/x509.py
index f15109ae..c3af0ebf 100644
--- a/scripts/rpki/x509.py
+++ b/scripts/rpki/x509.py
@@ -294,7 +294,6 @@ class X509(DER_object):
["authorityKeyIdentifier", False, (aki, (), None)],
["cRLDistributionPoints", False, ((("fullName", (("uri", crldp),)), None, ()),)],
["authorityInfoAccess", False, (((1, 3, 6, 1, 5, 5, 7, 48, 2), ("uri", aia)),)],
- ["subjectInfoAccess", False, sia],
["certificatePolicies", True, (((1, 3, 6, 1, 5, 5, 7, 14, 2), ()),)] ]
if is_ca:
@@ -303,6 +302,11 @@ class X509(DER_object):
else:
exts.append(["keyUsage", True, (1,)])
+ if sia is not None:
+ exts.append(["subjectInfoAccess", False, sia])
+ else:
+ assert not is_ca
+
if as:
exts.append(["sbgp-autonomousSysNum", True, (as.to_tuple(), None)])
if v4 or v6: