fix(cmd): store correct CA verification status (#9554)

xqqp · web-flow · commit ed399717b9b9 · 2026-01-05T15:13:07.000-05:00
**Description**

If `CheckSignatureFrom()` returns an error, the `verifiedCA` property of
`certInfo` should be set to `"FAILED"`. However, currently `verifiedCA`
is always set to `"PASSED"`, ignoring the result of
`CheckSignatureFrom()`. This PR sets the correct status.
diff --git a/dgraph/cmd/cert/info.go b/dgraph/cmd/cert/info.go
@@ -85,10 +85,10 @@ func getFileInfo(file string) *certInfo {
 				info.err = errors.Wrapf(err, "could not read parent cert")
 				return &info
 			}
-			if err := cert.CheckSignatureFrom(parent); err != nil {
-				info.verifiedCA = "FAILED"
+			info.verifiedCA = "FAILED"
+			if err := cert.CheckSignatureFrom(parent); err == nil {
+				info.verifiedCA = "PASSED"
 			}
-			info.verifiedCA = "PASSED"
 		}
 
 	case strings.HasSuffix(file, ".key"):

Original file line number	Diff line number	Diff line change
`@@ -85,10 +85,10 @@ func getFileInfo(file string) *certInfo {`
`85`	`85`	`info.err = errors.Wrapf(err, "could not read parent cert")`
`86`	`86`	`return &info`
`87`	`87`	`}`
`88`		`- if err := cert.CheckSignatureFrom(parent); err != nil {`
`89`		`- info.verifiedCA = "FAILED"`
	`88`	`+ info.verifiedCA = "FAILED"`
	`89`	`+ if err := cert.CheckSignatureFrom(parent); err == nil {`
	`90`	`+ info.verifiedCA = "PASSED"`
`90`	`91`	`}`
`91`		`- info.verifiedCA = "PASSED"`
`92`	`92`	`}`
`93`	`93`
`94`	`94`	`case strings.HasSuffix(file, ".key"):`