[Opensc-devel] Fix: wrong certificate selected when more than one is present

[Graham L. <mi...@sh...>]

Hi all,

I’d like to draw attention to this fix for libp11 - when multiple certificates are present and they have the same label (eg a blank label), the wrong certificate will be chosen even if an ID is also specified. This results in errors such as the key not matching the certificate.

You see this in cases where a renewed certificate is present on a token at the same time as an older cert. 

Fix is here:

https://github.com/OpenSC/libp11/pull/433

Regards,
Graham
—