Merge pull request #378 from nsacyber/issue-345

[#345] Modify SupplyChainCredentialValidator class to loop through truststore
This commit is contained in:
chubtub 2021-07-01 12:41:16 -04:00 committed by GitHub
commit f3085759b7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1405,7 +1405,7 @@ public final class SupplyChainCredentialValidator implements CredentialValidator
boolean issuerMatchesSubject = false;
boolean signatureMatchesPublicKey = false;
while (foundRootOfCertChain.isEmpty() && certIterator.hasNext()) {
while (certIterator.hasNext()) {
trustedCert = certIterator.next();
issuerMatchesSubject = issuerMatchesSubjectDN(cert, trustedCert);
signatureMatchesPublicKey = signatureMatchesPublicKey(cert, trustedCert);