- krw@cvs.openbsd.org 2013/01/25 05:00:27

     [krl.c]
     Revert last. Breaks due to likely typo. Let djm@ fix later.
     ok djm@ via dlg@

2 files changed, 6 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 87fe12d71..4f8fe9713 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -6,6 +6,10 @@
    - djm@cvs.openbsd.org 2013/01/24 22:08:56
      [krl.c]
      skip serial lookup when cert's serial number is zero
+   - krw@cvs.openbsd.org 2013/01/25 05:00:27
+     [krl.c]
+     Revert last. Breaks due to likely typo. Let djm@ fix later.
+     ok djm@ via dlg@
 
 20130211
  - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on old
diff --git a/krl.c b/krl.c
index 916852675..6d86c2097 100644
--- a/krl.c
+++ b/krl.c
@@ -14,7 +14,7 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $OpenBSD: krl.c,v 1.6 2013/01/24 22:08:56 djm Exp $ */
+/* $OpenBSD: krl.c,v 1.7 2013/01/25 05:00:27 krw Exp $ */
 
 #include "includes.h"
 
@@ -1149,7 +1149,7 @@ is_key_revoked(struct ssh_krl *krl, const Key *key)
         }
 
         /* Legacy cert formats lack serial numbers */
-        if (key_cert_is_legacy(key) || key->cert->serial == buf0)
+        if (key_cert_is_legacy(key))
                 return 0;
 
         bzero(&rs, sizeof(rs));