Skip to content

fix: Fall back to v3 certificate parsing if certificate is not v4#723

Merged
lwshang merged 4 commits intomainfrom
spofford/fallback-cert-path
Apr 14, 2026
Merged

fix: Fall back to v3 certificate parsing if certificate is not v4#723
lwshang merged 4 commits intomainfrom
spofford/fallback-cert-path

Conversation

@adamspofford-dfinity
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates delegated certificate authorization to support older (non-sharded) canister range encodings by falling back to /subnet/<subnet_id>/canister_ranges when the sharded /canister_ranges/<subnet_id>/... subtree is not available.

Changes:

  • Attempt to read canister ranges from the sharded /canister_ranges/<subnet_id>/<shard> layout (v4-style).
  • Fall back to reading canister ranges from /subnet/<subnet_id>/canister_ranges (v3-style) when the sharded subtree is absent/unknown.
  • Preserve existing effective-canister authorization check against the parsed ranges.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread ic-agent/src/agent/mod.rs
@lwshang lwshang enabled auto-merge (squash) April 14, 2026 12:52
@lwshang lwshang merged commit 9829e87 into main Apr 14, 2026
16 checks passed
@lwshang lwshang deleted the spofford/fallback-cert-path branch April 14, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants