commit bffa1165357a5964c44794c253019375c2a80250
author Daniel Stenberg <daniel@haxx.se> Wed Apr 22 08:13:23 2020 +0200
committer Daniel Stenberg <daniel@haxx.se> Wed Apr 22 22:55:08 2020 +0200
tree 7cdfc4ed6ca734a6f40a20358d93bb8b0b0da4f5
parent 3fdc4bdb5b00835a1d04cf160cd61fe7f8feb477

lib/mk-ca-bundle: skip empty certs

Reviewed-by: Emil Engler
Reported-by: Ashwin Metpalli
Fixes #5278
Closes #5280

lib/mk-ca-bundle.pl

diff --git a/lib/mk-ca-bundle.pl b/lib/mk-ca-bundle.pl
index 09e8e5b..b9c7ed2 100755
--- a/lib/mk-ca-bundle.pl
+++ b/lib/mk-ca-bundle.pl
@@ -63,7 +63,7 @@
 # If the OpenSSL commandline is not in search path you can configure it here!
 my $openssl = 'openssl';
 
-my $version = '1.27';
+my $version = '1.28';
 
 $opt_w = 76; # default base64 encoded lines length
 
@@ -531,6 +531,11 @@
     } else {
       my $data = $cka_value;
       $cka_value = "";
+
+      if(!length($data)) {
+          # if empty, skip
+          next;
+      }
       my $encoded = MIME::Base64::encode_base64($data, '');
       $encoded =~ s/(.{1,${opt_w}})/$1\n/g;
       my $pem = "-----BEGIN CERTIFICATE-----\n"