feat: verify-blob --cert base64 (#1088)

Signed-off-by: Carlos A Becker <[email protected]>
sigstore · Nov 21, 2021 · aff2e37 · aff2e37
1 parent 5586790
commit aff2e37
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/cmd/cosign/cli/verify/verify_blob.go b/cmd/cosign/cli/verify/verify_blob.go
@@ -117,7 +117,14 @@ func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, certRef, sigRef, blobRe
 			return err
 		}
 
-		certs, err := cryptoutils.LoadCertificatesFromPEM(bytes.NewReader(pems))
+		var out []byte
+		out, err = base64.StdEncoding.DecodeString(string(pems))
+		if err != nil {
+			// not a base64
+			out = pems
+		}
+
+		certs, err := cryptoutils.UnmarshalCertificatesFromPEM(out)
 		if err != nil {
 			return err
 		}