apple / apple/foundationdb

fdbcli --debug-tls will print out the same certificate twice

Open
#3,085 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C++
Stars
16.7k
Forks
1.6k
Avg merge
1d 20h
Merged PRs (30d)
126

Description

I went through like 5 different iterations of how to load and print a certificate chain, and apparently I still got it wrong.

```
$ fdbcli -C ../fdb.cluster --debug-tls
TLS Configuration:
...

Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246816641601864293 (0x2d0f02887d818265)

Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246816641601864293 (0x2d0f02887d818265)
```

So it's possible that the "print the rest of the chain" code is all that's needed, and I was wrong that the user-set end certificate needs to be printed separately?

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the issue with `fdbcli -C ../fdb.cluster --debug-tls` and inspect the TLS certificate-chain printing entry point. Confirm why the same certificate is emitted twice, determine the intended chain output, and verify that the command prints each certificate once.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
cli, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.