rgw/sts: fix for wrong certificate getting picked during

validation of a web token signature.

A boolean flag is incorrectly set to true outside the 'if'
statement, which causes an incorrect cert to be picked.

fixes: https://tracker.ceph.com/issues/54562

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>

diff --git a/src/rgw/rgw_rest_sts.cc b/src/rgw/rgw_rest_sts.cc
index 6df53f612cde91743f992eae241fd7226fda11b5..dbe4994cfa52827c722ead050bfd2f6b325f7b69 100644 (file)
--- a/src/rgw/rgw_rest_sts.cc
+++ b/src/rgw/rgw_rest_sts.cc
@@ -384,7 +384,6 @@ WebTokenEngine::validate_signature(const DoutPrefixProvider* dpp, const jwt::dec
                found_valid_cert = true;
                break;
               }
-              found_valid_cert = true;
             }
             if (! found_valid_cert) {
               ldpp_dout(dpp, 0) << "Cert doesn't match that with the thumbprints registered with oidc provider: " << cert.c_str() << dendl;