From 09202248164188289555a6dea21be1ce267cba6f Mon Sep 17 00:00:00 2001 From: Mariano Cano Date: Fri, 7 Jan 2022 11:09:32 -0800 Subject: [PATCH] Fix error message. --- authority/provisioner/nebula.go | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/authority/provisioner/nebula.go b/authority/provisioner/nebula.go index f6d89aa8..a77f4281 100644 --- a/authority/provisioner/nebula.go +++ b/authority/provisioner/nebula.go @@ -326,12 +326,12 @@ func (p *Nebula) authorizeToken(token string, audiences []string) (*nebula.Nebul return nil, nil, errs.UnauthorizedErr(err, errs.WithMessage("failed to parse nebula certificate: nebula header is not valid")) } - // Validate nebula certificate against CA + // Validate nebula certificate against CAs if valid, err := c.Verify(now(), p.caPool); !valid { if err != nil { - return nil, nil, errs.UnauthorizedErr(err, errs.WithMessage("token is not valid: failed to unmarshal certificate")) + return nil, nil, errs.UnauthorizedErr(err, errs.WithMessage("token is not valid: failed to verify certificate against configured CA")) } - return nil, nil, errs.Unauthorized("token is not valid: failed to unmarshal certificate") + return nil, nil, errs.Unauthorized("token is not valid: failed to verify certificate against configured CA") } var pub interface{}