From e7a16ad279f0aebc9ab98851be3be88bb759825a Mon Sep 17 00:00:00 2001
From: Christian Hesse <mail@eworm.de>
Date: Mon, 12 Jan 2026 08:41:18 +0100
Subject: [PATCH] check-certificates: give hint on possibly incomplete cert
 chain

---
 check-certificates.rsc | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/check-certificates.rsc b/check-certificates.rsc
index 5049a340..9a83d8ae 100644
--- a/check-certificates.rsc
+++ b/check-certificates.rsc
@@ -123,7 +123,11 @@
              [[ :parse (":return [ :len [ /certificate/builtin/find where skid=\"" . ($CertVal->"akid") . "\" ] ]") ]] > 0) do={
           :return $Return;
         }
-        :set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ];
+        :do {
+          :set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ];
+        } on-error={
+          :return ($Return . " (possibly incomplete!)");
+        }
         :if (($CertVal->"akid") = "" || ($CertVal->"akid") = ($CertVal->"skid")) do={
           :return $Return;
         }