From c9f55b045fe9172b02373a3ad3e56cccb0c19996 Mon Sep 17 00:00:00 2001
From: Sun Yimin <emmansun@users.noreply.github.com>
Date: Tue, 19 Nov 2024 10:55:41 +0800
Subject: [PATCH] smx509: ParseCertificatePEM validate type

---
 smx509/parser.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/smx509/parser.go b/smx509/parser.go
index f7eaff0..42d4f8d 100644
--- a/smx509/parser.go
+++ b/smx509/parser.go
@@ -1063,7 +1063,7 @@ func ParseCertificates(der []byte) ([]*Certificate, error) {
 
 func ParseCertificatePEM(data []byte) (*Certificate, error) {
 	block, _ := pem.Decode(data)
-	if block == nil {
+	if block == nil || block.Type != "CERTIFICATE" {
 		return nil, errors.New("x509: failed to decode PEM block containing certificate")
 	}
 	return ParseCertificate(block.Bytes)