From d1f0d16edf01db40828474f28a5d4b0c2be53d8b Mon Sep 17 00:00:00 2001 From: Adam Chalkley Date: Wed, 12 Feb 2025 05:37:20 -0600 Subject: [PATCH] Fix SANs length check in expiration validation Replace unintentional check of the first SANs entry's length with the intended length check of the collection itself. refs GH-1235 --- internal/certs/validation-expiration.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/certs/validation-expiration.go b/internal/certs/validation-expiration.go index 1c49c57..ec28899 100644 --- a/internal/certs/validation-expiration.go +++ b/internal/certs/validation-expiration.go @@ -706,7 +706,7 @@ func (evr ExpirationValidationResult) Status() string { // but if it is, use the first SubjectAlternateName field in its place if nextCertToExpire.Subject.CommonName == "" { - if len(nextCertToExpire.DNSNames[0]) > 0 { + if len(nextCertToExpire.DNSNames) > 0 { nextCertToExpireServerName = nextCertToExpire.DNSNames[0] } }