check-certificates: give hint on possibly incomplete cert chain

This commit is contained in:
Christian Hesse 2026-01-12 08:41:18 +01:00
parent 5481787869
commit e7a16ad279

View file

@ -123,7 +123,11 @@
[[ :parse (":return [ :len [ /certificate/builtin/find where skid=\"" . ($CertVal->"akid") . "\" ] ]") ]] > 0) do={ [[ :parse (":return [ :len [ /certificate/builtin/find where skid=\"" . ($CertVal->"akid") . "\" ] ]") ]] > 0) do={
:return $Return; :return $Return;
} }
:set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ]; :do {
:set CertVal [ /certificate/get [ find where skid=($CertVal->"akid") ] ];
} on-error={
:return ($Return . " (possibly incomplete!)");
}
:if (($CertVal->"akid") = "" || ($CertVal->"akid") = ($CertVal->"skid")) do={ :if (($CertVal->"akid") = "" || ($CertVal->"akid") = ($CertVal->"skid")) do={
:return $Return; :return $Return;
} }