代码拉取完成,页面将自动刷新
同步操作将从 tupelo-shen/mysnapd 强制同步,此操作会覆盖自 Fork 仓库以来所做的任何修改,且无法恢复!!!
确定后同步将在后台操作,完成时将刷新页面,请耐心等待。
// -*- Mode: Go; indent-tabs-mode: t -*-
//go:build !nomanagers
// +build !nomanagers
/*
* Copyright (C) 2020 Canonical Ltd
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 3 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
*/
package configcore
import (
"crypto/x509"
"fmt"
"io/ioutil"
"os"
"path/filepath"
"strings"
"gitee.com/mysnapcore/mysnapd/dirs"
"gitee.com/mysnapcore/mysnapd/overlord/configstate/config"
)
func handleCertConfiguration(tr config.Conf, opts *fsOnlyContext) error {
// This handles the "snap revert core" case:
// We need to go over each pem cert on disk and check if there is
// a matching config entry - if not->delete the cert
//
// XXX: remove this code once we have a general way to handle
// "snap revert" and config updates
//
// TODO: add ways to detect cleanly if tr is a patch, skip the sync code if it is
storeCerts, err := filepath.Glob(filepath.Join(dirs.SnapdStoreSSLCertsDir, "*.pem"))
if err != nil {
return fmt.Errorf("cannot get exiting store certs: %v", err)
}
for _, storeCertPath := range storeCerts {
optionName := strings.TrimSuffix(filepath.Base(storeCertPath), ".pem")
v, err := coreCfg(tr, "store-certs."+optionName)
if err != nil {
return err
}
if v == "" {
if err := os.Remove(storeCertPath); err != nil {
return err
}
}
}
// add/remove regular (non revert) changes
for _, name := range tr.Changes() {
if !strings.HasPrefix(name, "core.store-certs.") {
continue
}
nameWithoutSnap := strings.SplitN(name, ".", 2)[1]
cert, err := coreCfg(tr, nameWithoutSnap)
if err != nil {
return fmt.Errorf("internal error: cannot get data for %s: %v", nameWithoutSnap, err)
}
optionName := strings.SplitN(name, ".", 3)[2]
certPath := filepath.Join(dirs.SnapdStoreSSLCertsDir, optionName+".pem")
switch cert {
case "":
// remove
if err := os.Remove(certPath); err != nil && !os.IsNotExist(err) {
return fmt.Errorf("cannot remove store certificate: %v", err)
}
default:
if err := os.MkdirAll(dirs.SnapdStoreSSLCertsDir, 0755); err != nil {
return fmt.Errorf("cannot create store ssl certs dir: %v", err)
}
if err := ioutil.WriteFile(certPath, []byte(cert), 0644); err != nil {
return fmt.Errorf("cannot write store certificate: %v", err)
}
}
}
return nil
}
func validateCertSettings(tr config.Conf) error {
for _, name := range tr.Changes() {
if !strings.HasPrefix(name, "core.store-certs.") {
continue
}
nameWithoutSnap := strings.SplitN(name, ".", 2)[1]
cert, err := coreCfg(tr, nameWithoutSnap)
if err != nil {
return fmt.Errorf("internal error: cannot get data for %s: %v", nameWithoutSnap, err)
}
if cert != "" {
optionName := strings.SplitN(name, ".", 3)[2]
if !validCertName(optionName) {
return fmt.Errorf("cannot set store ssl certificate under name %q: name must only contain word characters or a dash", optionName)
}
cp := x509.NewCertPool()
if !cp.AppendCertsFromPEM([]byte(cert)) {
return fmt.Errorf("cannot decode pem certificate %q", optionName)
}
}
}
return nil
}
此处可能存在不合适展示的内容,页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容,可点击提交进行申诉,我们将尽快为您处理。