{"record":{"id":"6cbabde920fc725f","repo":"dapr/dapr","slug":"issuer-chain-does-not-belong-to-trust-anchors-w","errorCode":null,"errorMessage":"issuer chain does not belong to trust anchors: %w","messagePattern":"issuer chain does not belong to trust anchors: %w","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/sentry/server/ca/validate.go","lineNumber":123,"sourceCode":"\t\treturn nil, errors.New(\"issuer key does not match issuer certificate\")\n\t}\n\n\t// Ensure issuer chain belongs to one of the trust anchors.\n\ttrustAnchorPool := x509.NewCertPool()\n\tfor _, cert := range trustAnchorsX509 {\n\t\ttrustAnchorPool.AddCert(cert)\n\t}\n\n\tintPool := x509.NewCertPool()\n\tfor _, cert := range issChain[1:] {\n\t\tintPool.AddCert(cert)\n\t}\n\n\tif _, err := issChain[0].Verify(x509.VerifyOptions{\n\t\tRoots:         trustAnchorPool,\n\t\tIntermediates: intPool,\n\t}); err != nil {\n\t\treturn nil, fmt.Errorf(\"issuer chain does not belong to trust anchors: %w\", err)\n\t}\n\n\treturn &bundle.X509{\n\t\tTrustAnchors: trustAnchors,\n\t\tIssChainPEM:  issChainPEM,\n\t\tIssChain:     issChain,\n\t\tIssKeyPEM:    issKeyPEM,\n\t\tIssKey:       issKey,\n\t}, nil\n}\n\n// loadJWTSigningKey loads a JWT signing key from PEM format.\nfunc loadJWTSigningKey(keyPEM []byte) (crypto.Signer, error) {\n\tprivateKey, err := pem.DecodePEMPrivateKey(keyPEM)\n\tif err != nil {\n\t\treturn nil, fmt.Errorf(\"failed to decode JWT signing key: %w\", err)\n\t}\n","sourceCodeStart":105,"sourceCodeEnd":141,"githubUrl":"https://github.com/dapr/dapr/blob/74ad41702745709bb15fe2114ff693b8c59bc3cc/pkg/sentry/server/ca/validate.go#L105-L141","documentation":"Error \"issuer chain does not belong to trust anchors: %w\" thrown in dapr/dapr.","triggerScenarios":"Thrown at pkg/sentry/server/ca/validate.go:123 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"74ad41702745709bb15fe2114ff693b8c59bc3cc","analyzedAt":"2026-08-16T04:22:26.543Z","schemaVersion":2},"datasetVersion":"2026-08-16T08:17:34.114Z"}