Skip to content

Commit 528d8dc

Browse files
committed
Don't include CSA root as a PAA
1 parent 14726c8 commit 528d8dc

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

credentials/fetch_paa_certs_from_dcl.py

+3
Original file line numberDiff line numberDiff line change
@@ -201,6 +201,9 @@ def fetch_paa_certs(use_main_net_dcld, use_test_net_dcld, use_main_net_http, use
201201
parse_paa_root_certs(cmdpipe, paa_list)
202202

203203
for paa in paa_list:
204+
if paa['subject'] == MATTER_CERT_CA_SUBJECT and paa['subjectKeyId'] == MATTER_CERT_CA_SUBJECT_KEY_ID:
205+
# Don't include the CD signing cert as a PAA root.
206+
continue
204207
if use_rest:
205208
certificate, subject = get_cert_from_rest(rest_node_url, paa['subject'], paa['subjectKeyId'])
206209
else:

0 commit comments

Comments
 (0)