Nulo/kawipiko
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

[server] Move TLS certificate parsing before imposing no filesystem access seccomp filter.

Browse source
This commit is contained in:
Ciprian Dorin Craciun 2022-09-11 20:53:19 +03:00
parent 7d58cd3eca
commit eda087dc7d
1 changed files with 17 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
sources/cmd/server/server.go
View file

@ -1422,6 +1422,18 @@ func main_0 () (error) {
var _tlsCertificate *tls.Certificate
if _tlsPrivate != "" {
if _certificate_0, _error := tls.LoadX509KeyPair (_tlsPublic, _tlsPrivate); _error == nil {
_tlsCertificate = & _certificate_0
} else {
AbortError (_error, "[ecdf443d] [tls.....] failed loading TLS certificate!")
}
}
// -------------------------------------------------------------------------------- // --------------------------------------------------------------------------------
// -------------------------------------------------------------------------------- // --------------------------------------------------------------------------------
@ -1718,12 +1730,8 @@ func main_0 () (error) {
} }
if (_bindTls1 != "") || (_bindTls2 != "") { if (_bindTls1 != "") || (_bindTls2 != "") {
if _tlsPrivate != "" { if _tlsCertificate != nil {
if _certificate, _error := tls.LoadX509KeyPair (_tlsPublic, _tlsPrivate); _error == nil { _tls1Config.Certificates = append (_tls1Config.Certificates, *_tlsCertificate)
_tls1Config.Certificates = append (_tls1Config.Certificates, _certificate)
} else {
AbortError (_error, "[ecdf443d] [tls.....] failed loading TLS certificate!")
}
} }
if len (_tls1Config.Certificates) == 0 { if len (_tls1Config.Certificates) == 0 {
var _tlsPublic, _tlsPrivate []byte var _tlsPublic, _tlsPrivate []byte
@ -1746,11 +1754,12 @@ func main_0 () (error) {
_tlsPublic = DefaultTlsRsaCertificatePublic _tlsPublic = DefaultTlsRsaCertificatePublic
_tlsPrivate = DefaultTlsRsaCertificatePrivate _tlsPrivate = DefaultTlsRsaCertificatePrivate
} }
if _certificate, _error := tls.X509KeyPair (_tlsPublic, _tlsPrivate); _error == nil { if _certificate_0, _error := tls.X509KeyPair (_tlsPublic, _tlsPrivate); _error == nil {
_tls1Config.Certificates = append (_tls1Config.Certificates, _certificate) _tlsCertificate = & _certificate_0
} else { } else {
AbortError (_error, "[98ba6d23] [tls.....] failed parsing TLS certificate!") AbortError (_error, "[98ba6d23] [tls.....] failed parsing TLS certificate!")
} }
_tls1Config.Certificates = append (_tls1Config.Certificates, *_tlsCertificate)
} }
} }