signalwire / libstirshaken

C library implementing STIR-shaken STI-SP AS/VS, STI-CA
MIT License
31 stars 23 forks source link

Ensure stir_shaken_cert_copy() also copies provided chain certificates #123

Closed mrtrev closed 2 years ago

mrtrev commented 2 years ago

When caching certificates it is currently not possible to provide required intermediary certificates to the library.

Currently, the first verification process of a certificate+intermediary will validate successfully, however when the cache process provides the cert+intermediary the validation will fail. This patch ensures the cache callback is able to provide required intermediary certificates to the library.