Skip to content

try to get complete chain if controller indicates an issue with current certificates#875

Merged
ekoby merged 3 commits intomainfrom
improper-chain
May 22, 2025
Merged

try to get complete chain if controller indicates an issue with current certificates#875
ekoby merged 3 commits intomainfrom
improper-chain

Conversation

@ekoby
Copy link
Copy Markdown
Member

@ekoby ekoby commented May 22, 2025

No description provided.

@ekoby ekoby requested a review from a team as a code owner May 22, 2025 20:17
library/ziti.c Outdated
// check if identity cert is expiring or expired
if (ztx->opts.cert_extension_window > 0) {
if (!api_sess->is_cert_extendable) {
ZTX_LOG(DEBUG, "identity certificate is not renewable");
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

seems more like a WARN to me

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i know you said it before, but it means it is a 3rd party cert, why warn about it?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LOL i thought it felt familiar... there's no way to discern if it's from the controller's pki or 3rd party?

restructure extension checks
@ekoby ekoby merged commit d72ea7c into main May 22, 2025
12 checks passed
@ekoby ekoby deleted the improper-chain branch May 22, 2025 22:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants