Add debug statement when returning early

svenzik · mrts · commit 155b18256af8 · 2025-05-20T16:36:49.000+03:00
WE2-1028

Signed-off-by: Sven Mitt &lt;svenzik@users.noreply.github.com&gt;
diff --git a/src/validator/certvalidators/SubjectCertificatePurposeValidator.php b/src/validator/certvalidators/SubjectCertificatePurposeValidator.php
@@ -66,6 +66,7 @@ public function validate(X509 $subjectCertificate): void
         if (!$usages || empty($usages)) {
             // Digital Signature extension present, but Extended Key Usage extension not present,
             // assume it is an authentication certificate (e.g. Luxembourg eID).
+            $this->logger?->debug("User certificate has Digital Signature key usage and no Extended Key Usage extension, this means that it can be used for client authentication.");
             return;
         }
         // Extended usages must contain TLS Web Client Authentication

Original file line number	Diff line number	Diff line change
`@@ -66,6 +66,7 @@ public function validate(X509 $subjectCertificate): void`
`66`	`66`	`if (!$usages \|\| empty($usages)) {`
`67`	`67`	`// Digital Signature extension present, but Extended Key Usage extension not present,`
`68`	`68`	`// assume it is an authentication certificate (e.g. Luxembourg eID).`
	`69`	`+ $this->logger?->debug("User certificate has Digital Signature key usage and no Extended Key Usage extension, this means that it can be used for client authentication.");`
`69`	`70`	`return;`
`70`	`71`	`}`
`71`	`72`	`// Extended usages must contain TLS Web Client Authentication`