fix: function IsUserHarica now uses raw issuer instead of (wrong) string representation

searchablecert.go

@@ -70,13 +70,12 @@ var SectigoPersonalFilter = func(c *x509.Certificate) bool {
 
 // IsUserHarica returns true if the certificate is a user certificate issued by HARICA
 var IsUserHarica = func(c *x509.Certificate) bool {
-	haricaIssuers := []string{
-		"C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client RSA Root CA 2021",
-		"C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT S/MIME RSA 1",
-		"C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA Client ECC Root CA 2021",
-		"C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT S/MIME ECC 1",
+	for _, rawIssuer := range CertificateIssuer[CAIdentifierHARICA] {
+		if bytes.Contains(c.RawIssuer, rawIssuer) {
+			return true
+		}
 	}
-	return slices.Contains(haricaIssuers, c.Issuer.String())
+	return false
 }
 
 var NoCommonNameFilter = func(c *x509.Certificate) bool {
@@ -522,6 +521,9 @@ func CertToSearchable(c *x509.Certificate) SearchableCert {
 	}
 
 	// Sorting order: Group > User > Ext > Server > Pseudonym
+	//if strings.Contains(cert.Subject, "carsten.thuemmel@kit.edu") && strings.Contains(cert.Issuer, "Hellen") {
+	//	fmt.Println("XXX")
+	//}
 	switch {
 	case CertificateStats.FilterIsPseudonym(c):
 		cert.Type = Pseudonym