Files
vault/changelog/29255.txt
Victor Rodriguez f6910bbb2e Sort CA chain into root and intermediates on VerifyCertificate. (#29255)
Sort CA chain into root and intermediates on VerifyCertificate.

In order for the Certificate.Verify method to work correctly, the certificates
in the CA chain need to be sorted into separate root and intermediate
certificate pools.

Add unit tests to verify that name constraints in both the root and intermediate
certificates are checked.
2024-12-23 19:56:41 +00:00

4 lines
124 B
Plaintext

```release-note:bug
secrets/pki: Fix a bug that prevented the full CA chain to be used when enforcing name constraints.
```