Load certs by issuer #49062 (#50474)

simon-curtis · web-flow · commit 045afcd68e6c · 2023-09-06T14:17:50.000-07:00
diff --git a/src/Servers/Kestrel/Core/src/CertificateLoader.cs b/src/Servers/Kestrel/Core/src/CertificateLoader.cs
@@ -48,7 +48,7 @@ public static X509Certificate2 LoadFromStoreCert(string subject, string storeNam
                     // Pick the first one if there's no exact match as a fallback to substring default.
                     foundCertificate ??= certificate;
 
-                    if (certificate.GetNameInfo(X509NameType.SimpleName, true).Equals(subject, StringComparison.InvariantCultureIgnoreCase))
+                    if (certificate.GetNameInfo(X509NameType.SimpleName, forIssuer: false).Equals(subject, StringComparison.InvariantCultureIgnoreCase))
                     {
                         foundCertificate = certificate;
                         break;

Original file line number	Diff line number	Diff line change
`@@ -48,7 +48,7 @@ public static X509Certificate2 LoadFromStoreCert(string subject, string storeNam`
`48`	`48`	`// Pick the first one if there's no exact match as a fallback to substring default.`
`49`	`49`	`foundCertificate ??= certificate;`
`50`	`50`
`51`		`- if (certificate.GetNameInfo(X509NameType.SimpleName, true).Equals(subject, StringComparison.InvariantCultureIgnoreCase))`
	`51`	`+ if (certificate.GetNameInfo(X509NameType.SimpleName, forIssuer: false).Equals(subject, StringComparison.InvariantCultureIgnoreCase))`
`52`	`52`	`{`
`53`	`53`	`foundCertificate = certificate;`
`54`	`54`	`break;`