fix(go.d/x509check): correct check revocation code (#19004)
Ilya Mashchenko committed
Nov 13, 2024 at 00:16 UTC
c40e11fd81cb6cbc90580bb1ea6ad991ce7126af
1 file changed
+13
-13
src/go/plugin/go.d/modules/x509check/collect.go
+13
-13
@@ -42,21 +42,21 @@ func (x *X509Check) collectCertificates(mx map[string]int64, certs []*x509.Certi
42
43
px := fmt.Sprintf("cert_depth%d_", i)
44
45
- expiry := int64(time.Until(cert.NotAfter).Seconds())
46
-
47
- mx[px+"expiry"] = expiry
45
+ mx[px+"expiry"] = int64(time.Until(cert.NotAfter).Seconds())
46
47
if i == 0 && x.CheckRevocation {
50
- rev, ok, err := revoke.VerifyCertificateError(certs[0])
51
- if err != nil {
52
- x.Debug(err)
53
- continue
54
- }
55
- if !ok {
56
- continue
57
- }
58
- mx[px+"revoked"] = metrix.Bool(rev)
59
- mx[px+"not_revoked"] = metrix.Bool(!rev)
48
+ func() {
49
+ rev, ok, err := revoke.VerifyCertificateError(cert)
50
+ if err != nil {
51
+ x.Debug(err)
52
+ return
53
+ }
54
+ if !ok {
55
+ return
56
+ }
57
+ mx[px+"revoked"] = metrix.Bool(rev)
58
+ mx[px+"not_revoked"] = metrix.Bool(!rev)
59
+ }()
60
}
61
62
if !x.CheckFullChain {