From 80b8463c7625c14efd28f1b46dcc624e58827409 Mon Sep 17 00:00:00 2001
From: Cedric Staub <cs@squareup.com>
Date: Tue, 21 Jun 2016 11:48:00 -0700
Subject: [PATCH] Skip non-certificate PEM blocks

---
 main.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/main.go b/main.go
index 99e9e41..a3e437f 100644
--- a/main.go
+++ b/main.go
@@ -232,6 +232,10 @@ func readCertsFromFile(wg *sync.WaitGroup, reader io.Reader, filename string, fo
 		scanner := pemScanner(reader)
 		for scanner.Scan() {
 			block, _ := pem.Decode(scanner.Bytes())
+			if block.Type != "CERTIFICATE" {
+				// Skip non-certificate PEM blocks
+				continue
+			}
 			cert, err := x509.ParseCertificate(block.Bytes)
 			if err != nil {
 				fmt.Fprintf(os.Stderr, "error parsing certificate: %s", err)