refactor: implem logs for untrusted chain certs mongo tls

aneoconsulting · Jan 21, 2025 · fad3eca · fad3eca
1 parent 9d304cf
commit fad3eca
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/Utils/src/ServerCertificateValidator.cs b/Utils/src/ServerCertificateValidator.cs
@@ -83,8 +83,15 @@ public static RemoteCertificateValidationCallback ValidationCallback(ILogger
          }
          else
          {
-           logger.LogInformation("SSL validation failed with errors: {sslPolicyErrors}",
+           logger.LogInformation("Certificate untrusted: {sslPolicyErrors}",
                                  sslPolicyErrors);
+           logger.LogInformation("Certificate thumbprint: {thumbprint}",
+                           cert.Thumbprint);
+           logger.LogInformation("Authority thumbprint: {thumbprint}",
+                           authority.Thumbprint);
+           logger.LogInformation("Chain thumbprints: {thumbprints}",
+                           string.Join(", ",
+                                       chain.ChainElements.Select(x => x.Certificate.Thumbprint)));
          }
 
          return isTrusted;