*: only check CommonName if chain is populated

Signed-off-by: Sam Batschelet <[email protected]>
etcd-io · Jan 2, 2019 · c0ecbd4 · c0ecbd4
1 parent 993aeef
commit c0ecbd4
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/auth/store.go b/auth/store.go
@@ -1159,10 +1159,14 @@ func (as *authStore) AuthInfoFromTLS(ctx context.Context) (ai *AuthInfo) {
 
 	tlsInfo := peer.AuthInfo.(credentials.TLSInfo)
 	for _, chains := range tlsInfo.State.VerifiedChains {
+		if len(chains) < 1 {
+			continue
+		}
 		cn := chains[0].Subject.CommonName
-		if len(chains) < 1 || cn == "" {
+		if cn = "" {
 			continue
 		}
+
 		ai = &AuthInfo{
 			Username: cn,
 			Revision: as.Revision(),