diff options
| -rw-r--r-- | packages/server/src/helpers/validateCertificatePath.ts | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/packages/server/src/helpers/validateCertificatePath.ts b/packages/server/src/helpers/validateCertificatePath.ts index 1dd8c04..1023ff7 100644 --- a/packages/server/src/helpers/validateCertificatePath.ts +++ b/packages/server/src/helpers/validateCertificatePath.ts @@ -34,6 +34,10 @@ export default async function validateCertificatePath(certificates: string[]): P const issuerCert = new X509(); issuerCert.readCertPEM(issuerPem); + if (subjectCertRevoked) { + throw new Error(`Found revoked certificate in certificate path`); + } + // Check that intermediate certificate is within its valid time window const notBefore = zulutodate(issuerCert.getNotBefore()); const notAfter = zulutodate(issuerCert.getNotAfter()); |