homelab/traefik
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

check permissions on acme.json during startup

Browse source 
Follow-up from #639. At the moment people that were affected
by this security issue would still be vulnerable even after upgrading.

This patch makes sure permissions are also checked for already existing
files.

Signed-off-by: Bilal Amarni <bilal.amarni@gmail.com>
This commit is contained in:
Bilal Amarni 2017-01-12 11:04:11 +01:00
parent db68dd3bc1
commit 22b97b7214
2 changed files with 18 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
server.go
View file

@ -499,7 +499,7 @@ func (server *Server) prepareServer(entryPointName string, router *middlewares.H
negroni.UseHandler(router)
tlsConfig, err := server.createTLSConfig(entryPointName, entryPoint.TLS, router)
if err != nil {
log.Errorf("Error creating TLS config %s", err)
log.Errorf("Error creating TLS config: %s", err)
return nil, err
}
@ -517,7 +517,7 @@ func (server *Server) prepareServer(entryPointName string, router *middlewares.H
TLSConfig: tlsConfig,
}, tlsConfig)
if err != nil {
log.Errorf("Error hijacking server %s", err)
log.Errorf("Error hijacking server: %s", err)
return nil, err
}
return gracefulServer, nil