===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/ssh/krl.c,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- src/usr.bin/ssh/krl.c	2013/01/24 21:45:37	1.5
+++ src/usr.bin/ssh/krl.c	2013/01/24 22:08:56	1.6
@@ -14,7 +14,7 @@
  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $OpenBSD: krl.c,v 1.5 2013/01/24 21:45:37 djm Exp $ */
+/* $OpenBSD: krl.c,v 1.6 2013/01/24 22:08:56 djm Exp $ */
 
 #include <sys/types.h>
 #include <sys/param.h>
@@ -1147,7 +1147,7 @@
 	}
 
 	/* Legacy cert formats lack serial numbers */
-	if (key_cert_is_legacy(key))
+	if (key_cert_is_legacy(key) || key->cert->serial == buf0)
 		return 0;
 
 	bzero(&rs, sizeof(rs));