weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix #3619: Handle CA issuer working as intermediate correctly

Browse Source 
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
This commit is contained in:
Erik Godding Boye 2021-04-04 14:30:05 +02:00 committed by Erik Godding Boye
parent 861db7bf4e
commit bbafeeef67
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/util/pki/csr.go
View File

@ -424,9 +424,9 @@ func SignCSRTemplate(caCerts []*x509.Certificate, caKey crypto.Signer, template
return nil, nil, errors.New("no CA certificates given to sign CSR template")
}
caCert := caCerts[0]
issuingCACert := caCerts[0]
certPem, _, err := SignCertificate(template, caCert, template.PublicKey, caKey)
certPem, _, err := SignCertificate(template, issuingCACert, template.PublicKey, caKey)
if err != nil {
return nil, nil, err
@ -440,7 +440,8 @@ func SignCSRTemplate(caCerts []*x509.Certificate, caKey crypto.Signer, template
certPem = append(certPem, chainPem...)
// encode the CA certificate to be bundled in the output
caPem, err := EncodeX509(caCerts[0])
caCert := caCerts[len(caCerts)-1]
caPem, err := EncodeX509(caCert)
if err != nil {
return nil, nil, err
}