Fix DecodeAuthKeyInternal not clearing cert->extAuthKeyIdSet

embhorn · embhorn · commit 4e419938a76b · 2026-01-13T08:09:10.000-06:00
diff --git a/wolfcrypt/src/asn.c b/wolfcrypt/src/asn.c
@@ -21414,6 +21414,9 @@ static int DecodeAuthKeyIdInternal(const byte* input, word32 sz,
         ret = GetHashId(extAuthKeyId, (int)extAuthKeyIdSz, cert->extAuthKeyId,
                         HashIdAlg(cert->signatureOID));
     }
+    else {
+        cert->extAuthKeyIdSet = 0;
+    }
 
 #ifdef WOLFSSL_AKID_NAME
     if (ret == 0 && extAuthKeyIdIssuerSz > 0) {

Original file line number	Diff line number	Diff line change
`@@ -21414,6 +21414,9 @@ static int DecodeAuthKeyIdInternal(const byte* input, word32 sz,`
`21414`	`21414`	`ret = GetHashId(extAuthKeyId, (int)extAuthKeyIdSz, cert->extAuthKeyId,`
`21415`	`21415`	`HashIdAlg(cert->signatureOID));`
`21416`	`21416`	`}`
	`21417`	`+ else {`
	`21418`	`+ cert->extAuthKeyIdSet = 0;`
	`21419`	`+ }`
`21417`	`21420`
`21418`	`21421`	`#ifdef WOLFSSL_AKID_NAME`
`21419`	`21422`	`if (ret == 0 && extAuthKeyIdIssuerSz > 0) {`