Add a new variant of X509_CA::make_cert that takes an Extensions object,

rather than creating it internally. The older version (still used
internally) creates the Extensions object as before and passes it on.

1 files changed, 18 insertions, 0 deletions

diff --git a/src/x509_ca.cpp b/src/x509_ca.cpp
index b13559341..ac3faa7ac 100644
--- a/src/x509_ca.cpp
+++ b/src/x509_ca.cpp
@@ -132,6 +132,24 @@ X509_Certificate X509_CA::make_cert(PK_Signer* signer,
    extensions.add(
       new Cert_Extension::Issuer_Alternative_Name(issuer_alt));
 
+   return make_cert(signer, sig_algo, pub_key,
+                    not_before, not_after,
+                    issuer_dn, subject_dn,
+                    extensions);
+   }
+
+/*************************************************
+* Create a new certificate                       *
+*************************************************/
+X509_Certificate X509_CA::make_cert(PK_Signer* signer,
+                                    const AlgorithmIdentifier& sig_algo,
+                                    const MemoryRegion<byte>& pub_key,
+                                    const X509_Time& not_before,
+                                    const X509_Time& not_after,
+                                    const X509_DN& issuer_dn,
+                                    const X509_DN& subject_dn,
+                                    const Extensions& extensions)
+   {
    const u32bit X509_CERT_VERSION = 3;
    const u32bit SERIAL_BITS = 128;