fixup! Restore previous semantics of authorityKeyIdentifier=keyid

bernd-edlinger · bernd-edlinger · commit c193e4516f35 · 2025-10-29T17:23:26.000+01:00
diff --git a/crypto/x509/v3_akid.c b/crypto/x509/v3_akid.c
@@ -147,7 +147,7 @@ static AUTHORITY_KEYID *v2i_AUTHORITY_KEYID(X509V3_EXT_METHOD *method,
     }
     same_issuer = ctx->subject_cert == issuer_cert;
 
-    /* unless forced with "always", AKID is suppressed for self-signed certs */
+    /* unless forced with "always", AKID is optional */
     if (keyid != 0) {
         /*
          * prefer any pre-existing subject key identifier of the issuer cert

Original file line number	Diff line number	Diff line change
`@@ -147,7 +147,7 @@ static AUTHORITY_KEYID v2i_AUTHORITY_KEYID(X509V3_EXT_METHOD method,`
`147`	`147`	`}`
`148`	`148`	`same_issuer = ctx->subject_cert == issuer_cert;`
`149`	`149`
`150`		`- /* unless forced with "always", AKID is suppressed for self-signed certs */`
	`150`	`+ /* unless forced with "always", AKID is optional */`
`151`	`151`	`if (keyid != 0) {`
`152`	`152`	`/*`
`153`	`153`	`* prefer any pre-existing subject key identifier of the issuer cert`