aboutsummaryrefslogtreecommitdiff
path: root/x509.go
diff options
context:
space:
mode:
Diffstat (limited to 'x509.go')
-rw-r--r--x509.go3
1 files changed, 2 insertions, 1 deletions
diff --git a/x509.go b/x509.go
index e7a45e6..b8e2885 100644
--- a/x509.go
+++ b/x509.go
@@ -164,13 +164,14 @@ func ParseB64Chain(chain []string) (*x509.Certificate, *x509.CertPool, error) {
}
func buildChainFromB64List(lp *LogParameters, b64chain []string) ([]*x509.Certificate, error) {
- certificate, _, err := ParseB64Chain(b64chain) // TODO: use intermediatePool
+ certificate, intermediatePool, err := ParseB64Chain(b64chain)
if err != nil {
return nil, err
}
opts := x509.VerifyOptions{
Roots: lp.AnchorPool,
+ Intermediates: intermediatePool,
KeyUsages: []x509.ExtKeyUsage{x509.ExtKeyUsageAny}, // TODO: move to ld
}