Skip to content

Commit

Permalink
SNOW-1948906 Add logs to chain verification (#1315)
Browse files Browse the repository at this point in the history
  • Loading branch information
sfc-gh-pfus authored Mar 7, 2025
1 parent 69e2ad5 commit 8ed4c75
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions ocsp.go
Original file line number Diff line number Diff line change
Expand Up @@ -670,6 +670,8 @@ func verifyPeerCertificate(ctx context.Context, verifiedChains [][]*x509.Certifi
for i := 0; i < len(verifiedChains); i++ {
// Certificate signed by Root CA. This should be one before the last in the Certificate Chain
numberOfNoneRootCerts := len(verifiedChains[i]) - 1
logger.Tracef("checking cert, %v, %v, isCa: %v, rawIssuer: %v, rawSubject: %v", i, numberOfNoneRootCerts, verifiedChains[i][numberOfNoneRootCerts].IsCA, string(verifiedChains[i][numberOfNoneRootCerts].RawIssuer), string(verifiedChains[i][numberOfNoneRootCerts].RawSubject))
logger.Tracef("checking cert, base64, rawIssuer: %v, rawSubject: %v", base64.StdEncoding.EncodeToString(verifiedChains[i][numberOfNoneRootCerts].RawIssuer), base64.StdEncoding.EncodeToString(verifiedChains[i][numberOfNoneRootCerts].RawSubject))
if !verifiedChains[i][numberOfNoneRootCerts].IsCA || string(verifiedChains[i][numberOfNoneRootCerts].RawIssuer) != string(verifiedChains[i][numberOfNoneRootCerts].RawSubject) {
// Check if the last Non Root Cert is also a CA or is self signed.
// if the last certificate is not, add it to the list
Expand Down

0 comments on commit 8ed4c75

Please sign in to comment.