CL-Softwares
/
telegraf
8
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(inputs.x509_cert): fix off-by-one when adding intermediate certificates (#12404)

This commit is contained in:
Sven Rebhan 2022-12-15 15:52:36 +01:00 committed by GitHub
parent 0fadaec30c
commit d9820bfd7b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/inputs/x509_cert/x509_cert.go
View File

@ -119,7 +119,7 @@ func (c *X509Cert) Gather(acc telegraf.Accumulator) error {
// Add all returned certs to the pool if intermediates except for // Add all returned certs to the pool if intermediates except for
// the leaf node and ourself // the leaf node and ourself
for j, c := range certs[1:] { for j, c := range certs[1:] {
if i != j { if i+1 != j {
opts.Intermediates.AddCert(c) opts.Intermediates.AddCert(c)
} }
} }
@ -131,6 +131,8 @@ func (c *X509Cert) Gather(acc telegraf.Accumulator) error {
c.Log.Debugf("Invalid certificate at index %2d!", i) c.Log.Debugf("Invalid certificate at index %2d!", i)
c.Log.Debugf(" cert DNS names: %v", cert.DNSNames) c.Log.Debugf(" cert DNS names: %v", cert.DNSNames)
c.Log.Debugf(" cert IP addresses: %v", cert.IPAddresses) c.Log.Debugf(" cert IP addresses: %v", cert.IPAddresses)
c.Log.Debugf(" cert subject: %v", cert.Subject)
c.Log.Debugf(" cert issuer: %v", cert.Issuer)
c.Log.Debugf(" opts.DNSName: %v", opts.DNSName) c.Log.Debugf(" opts.DNSName: %v", opts.DNSName)
c.Log.Debugf(" verify options: %v", opts) c.Log.Debugf(" verify options: %v", opts)
c.Log.Debugf(" verify error: %v", err) c.Log.Debugf(" verify error: %v", err)