fixup! Add certificate support for subject alt name for mbedtls

1 files changed, 5 insertions, 3 deletions

diff --git a/src/ssl_mbedtls.cc b/src/ssl_mbedtls.cc
index 876b076..1b3e350 100644
--- a/src/ssl_mbedtls.cc
+++ b/src/ssl_mbedtls.cc
@@ -603,9 +603,11 @@ bool SSLCert::generate(Logger* logger, SSLEntropy* entropy,
     goto error;
   }
 
-  if (mbedtls_x509write_crt_set_subject_alt_name(&crt, host.c_str())) {
-    logerr(logger, ret, "Unable to set subject alt name");
-    goto error;
+  if (issuer_cert) {
+    if (mbedtls_x509write_crt_set_subject_alt_name(&crt, host.c_str())) {
+      logerr(logger, ret, "Unable to set subject alt name");
+      goto error;
+    }
   }
 
   if (mbedtls_mpi_fill_random(