rgw/sts: fix for wrong certificate getting picked during

validation of a web token signature.

A boolean flag is incorrectly set to true outside the 'if'
statement, which causes an incorrect cert to be picked.

fixes: https://tracker.ceph.com/issues/54562

Signed-off-by: Pritha Srivastava <[email protected]>

Author: pritha-srivastava

src/rgw/rgw_rest_sts.cc

@@ -384,7 +384,6 @@ WebTokenEngine::validate_signature(const DoutPrefixProvider* dpp, const jwt::dec
                found_valid_cert = true;
                break;
               }
-              found_valid_cert = true;
             }
             if (! found_valid_cert) {
               ldpp_dout(dpp, 0) << "Cert doesn't match that with the thumbprints registered with oidc provider: " << cert.c_str() << dendl;