check-certificates: give hint on possibly incomplete cert chain

This commit is contained in:
Christian Hesse 2026-01-12 08:41:18 +01:00
parent 5481787869
commit e7a16ad279

View file

@ -123,7 +123,11 @@
[[ :parse (":return [ :len [ /certificate/builtin/find where skid=\"" . ($CertVal->"akid") . "\" ] ]") ]] > 0) do={
:return $Return;
}
:set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ];
:do {
:set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ];
} on-error={
:return ($Return . " (possibly incomplete!)");
}
:if (($CertVal->"akid") = "" || ($CertVal->"akid") = ($CertVal->"skid")) do={
:return $Return;
}