Add RuntimeOperatorException to catch for CSCA validation (#37)

eu-digital-green-certificates · May 4, 2021 · 38cc373 · 38cc373
1 parent 946abde
commit 38cc373
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/java/eu/europa/ec/dgc/gateway/service/SignerInformationService.java b/src/main/java/eu/europa/ec/dgc/gateway/service/SignerInformationService.java
@@ -38,6 +38,7 @@
 import org.bouncycastle.cert.X509CertificateHolder;
 import org.bouncycastle.operator.ContentVerifierProvider;
 import org.bouncycastle.operator.OperatorCreationException;
+import org.bouncycastle.operator.RuntimeOperatorException;
 import org.bouncycastle.operator.jcajce.JcaContentVerifierProviderBuilder;
 import org.springframework.stereotype.Service;
 
@@ -243,8 +244,9 @@ private boolean certificateSignedByCa(X509CertificateHolder certificate, Trusted
 
         try {
             return certificate.isSignatureValid(verifier);
-        } catch (CertException e) {
+        } catch (CertException | RuntimeOperatorException e) {
             log.error("Could not verify certificate issuance.");
+            log.debug("Could not verify certificate issuance: {}", e.getMessage());
             return false;
         }
     }