update condition of determining a CA certificates to include checking…

… the basic constraints extension
sunny-chung · Dec 18, 2023 · 200e356 · 200e356
1 parent e08ec65
commit 200e356
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...nnychung/application/multiplatform/hellohttp/ux/SubprojectEnvironmentsEditorDialogView.kt b/...nnychung/application/multiplatform/hellohttp/ux/SubprojectEnvironmentsEditorDialogView.kt
@@ -453,7 +453,7 @@ fun CertificateEditorView(
                 id = uuidString(),
                 name = cert.subjectX500Principal.getName(X500Principal.RFC1779) +
                     "\nExpiry: ${KZonedInstant(cert.notAfter.time, KZoneOffset.local()).format(KDateTimeFormat.ISO8601_DATETIME.pattern)}" +
-                    if (cert.keyUsage?.get(5) != true) "\n⚠️ Not a CA certificate!" else ""
+                    if (cert.keyUsage?.get(5) != true || cert.basicConstraints < 0) "\n⚠️ Not a CA certificate!" else ""
                 ,
                 originalFilename = file.name,
                 createdWhen = KInstant.now(),