mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-10-29 17:52:32 +00:00
Sort CA chain into root and intermediates on VerifyCertificate. In order for the Certificate.Verify method to work correctly, the certificates in the CA chain need to be sorted into separate root and intermediate certificate pools. Add unit tests to verify that name constraints in both the root and intermediate certificates are checked.
4 lines
124 B
Plaintext
4 lines
124 B
Plaintext
```release-note:bug
|
|
secrets/pki: Fix a bug that prevented the full CA chain to be used when enforcing name constraints.
|
|
```
|