Repository navigation
getPeerX509Certificate() supports getting chain of certificates #44905
Description
Activity
Thank you for working on this, really appreciate it. :)
I see the PR has multiple approvals, is there a timeline followed for merging and deploying the change?PRs stay open a minimum of 48 hours in general and must pass CI before they can land.
Reacted by Chris Garvis and Vinayak KukrejaHey, following up here. When could it be possible to get this merged?
Hey, any updates about when the fix can be merged?
- added a commit that references this issue
on Nov 9, 2022 - added a commit that references this issue
on Nov 10, 2022
What is the problem this feature will solve?
Trying to verify if a certificate is a root certificate involves having the
subjectand theissueras same inPeerCertificateand knowing the the certificate was signed by CA.I see we can get a chain of certificates using
getPeerCertificate(true)but it does not have a property to verify ifca: truelike theX509Certificate.What is the feature you are proposing to solve the problem?
Wondering if it would be possible to either include this property in
PeerCertificateor allowing chaining ingetPeerX509Certificate().What alternatives have you considered?
I did not find a way to verify
ca: trueinPeerCertificate. Let me know if you believe this can be done with current chaining that is available.