ifcfg-rh: fix loading the PKCS#11 client certificate

Contrary to the comment above, the reader would skip the client certificate
even if the key is on PKCS#11 token, not just in a PKCS#12 archive.
This commit is contained in:
Lubomir Rintel 2017-04-07 16:47:44 +02:00
parent f66de1dd0f
commit 0812413c9d

View file

@ -2794,8 +2794,7 @@ eap_tls_reader (const char *eap_method,
* then nm_setting_802_1x_set_private_key() already set the client certificate
* to the same value as the private key.
*/
if ( privkey_format == NM_SETTING_802_1X_CK_FORMAT_RAW_KEY
|| privkey_format == NM_SETTING_802_1X_CK_FORMAT_X509) {
if (privkey_format != NM_SETTING_802_1X_CK_FORMAT_PKCS12) {
gs_free char *real_cert_value = NULL;
gs_free char *client_cert = NULL;