From bf5c6a155ad13a0630633b39f1160e94ed2a032f Mon Sep 17 00:00:00 2001
From: sal rashid <salrashid123@gmail.com>
Date: Thu, 9 Apr 2026 08:45:56 -0400
Subject: [PATCH] fix: Fixes issue with uninitialized grpc CertPool

Signed-off-by: sal rashid <salrashid123@gmail.com>
---
 keywrap/keyprovider/keyprovider.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/keywrap/keyprovider/keyprovider.go b/keywrap/keyprovider/keyprovider.go
index bccbff9..838f7ef 100644
--- a/keywrap/keyprovider/keyprovider.go
+++ b/keywrap/keyprovider/keyprovider.go
@@ -183,6 +183,7 @@ func getProviderGRPCOutput(input []byte, connString string, grpcTls *keyprovider
 			if err != nil {
 				return nil, fmt.Errorf("failed to load root CA certificates  error=%v", err)
 			}
+			rootCAs = x509.NewCertPool()
 			if !rootCAs.AppendCertsFromPEM(pem) {
 				return nil, fmt.Errorf("no root CA certs parsed from file ")
 			}