diff options
| -rw-r--r-- | verify.go | 4 | 
1 files changed, 3 insertions, 1 deletions
| @@ -12,12 +12,14 @@ import (  	"github.com/system-transparency/stfe/x509util"  ) +// buildChainFromDerList builds an X.509 certificate chain from a list of +// DER-encoded certificates using the log's configured trust anchors, extended +// key-usages, and maximum chain length (which includes the trust anchor).  func (lp *LogParameters) buildChainFromDerList(derChain [][]byte) ([]*x509.Certificate, error) {  	certificate, intermediatePool, err := x509util.ParseDerChain(derChain)  	if err != nil {  		return nil, err  	} -  	opts := x509.VerifyOptions{  		Roots:         lp.AnchorPool,  		Intermediates: intermediatePool, | 
