Extend the selection of Root Certificates in x509Chain (#264)

* init Signed-off-by: Johannes Tuerk <[email protected]> * trigger Signed-off-by: Johannes Tuerk <[email protected]> --------- Signed-off-by: Johannes Tuerk <[email protected]>
openwallet-foundation-labs · Jan 31, 2025 · e33bdd4 · e33bdd4
1 parent 474107c
commit e33bdd4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/WalletFramework.Core/X509/X509CertificateExtensions.cs b/src/WalletFramework.Core/X509/X509CertificateExtensions.cs
@@ -21,9 +21,10 @@ public static bool IsTrustChainValid(this List<X509Certificate> trustChain)
     {
         var leafCert = trustChain.First();
 
+        var subjects = trustChain.Select(cert => cert.SubjectDN); 
         var rootCerts = new HashSet(
             trustChain
-                .Where(cert => cert.IsSelfSigned())
+                .Where(cert => cert.IsSelfSigned() || !subjects.Contains(cert.IssuerDN))
                 .Select(cert => new TrustAnchor(cert, null)));
 
         var intermediateCerts = new HashSet(