mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-05-04 18:14:53 -05:00
Ralf Haferkamp
ca5952fe34
The check was still racy as it could return early if the cert file exists but was not fully written yet.
41 lines
1.1 KiB
Go
41 lines
1.1 KiB
Go
package ldap
|
|
|
|
import (
|
|
"crypto/x509"
|
|
"errors"
|
|
"io/ioutil"
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/log"
|
|
)
|
|
|
|
const (
|
|
caCheckRetries = 3
|
|
caCheckSleep = 2
|
|
)
|
|
|
|
func WaitForCA(log log.Logger, insecure bool, caCert string) error {
|
|
if !insecure && caCert != "" {
|
|
for i := 0; i < caCheckRetries; i++ {
|
|
if _, err := os.Stat(caCert); err != nil && !errors.Is(err, os.ErrNotExist) {
|
|
return err
|
|
}
|
|
// Check if this actually is a CA cert. We need to retry here as well
|
|
// as the file might exist already, but have no contents yet.
|
|
certs := x509.NewCertPool()
|
|
pemData, err := ioutil.ReadFile(caCert)
|
|
if err != nil {
|
|
log.Debug().Err(err).Str("LDAP CACert", caCert).Msg("Error reading CA")
|
|
} else if !certs.AppendCertsFromPEM(pemData) {
|
|
log.Debug().Str("LDAP CAcert", caCert).Msg("Failed to append CA to pool")
|
|
} else {
|
|
return nil
|
|
}
|
|
time.Sleep(caCheckSleep * time.Second)
|
|
log.Warn().Str("LDAP CACert", caCert).Msgf("CA cert file is not ready yet. Waiting %d seconds for it to appear.", caCheckSleep)
|
|
}
|
|
}
|
|
return nil
|
|
}
|