awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 13:27:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

tweaks

Browse Source
This commit is contained in:
x
2025-04-30 14:53:57 -04:00
parent 30471bfcad
commit 235be96ded
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/certificate/certificate-fns.ts
+4 -1
View File
@@ -105,9 +105,12 @@ export const buildCertificateChain = async ({
kmsService, kmsService,
kmsId kmsId
}: TBuildCertificateChainDTO) => { }: TBuildCertificateChainDTO) => {
if (!encryptedCertificateChain && (!caCert || !caCertChain)) {
return null;
}
let certificateChain = `${caCert}\n${caCertChain}`.trim(); let certificateChain = `${caCert}\n${caCertChain}`.trim();
// If the certificate was generated after ~05/01/25 it will have a encryptedCertificateChain attached to it's body
if (encryptedCertificateChain) { if (encryptedCertificateChain) {
const kmsDecryptor = await kmsService.decryptWithKmsKey({ kmsId }); const kmsDecryptor = await kmsService.decryptWithKmsKey({ kmsId });
const decryptedCertChain = await kmsDecryptor({ const decryptedCertChain = await kmsDecryptor({
backend/src/services/certificate/certificate-types.ts
+2 -2
View File
@@ -95,8 +95,8 @@ export type TGetCertificateCredentialsDTO = {
}; };
export type TBuildCertificateChainDTO = { export type TBuildCertificateChainDTO = {
caCert: string; caCert?: string;
caCertChain: string; caCertChain?: string;
encryptedCertificateChain?: Buffer; encryptedCertificateChain?: Buffer;
kmsService: Pick<TKmsServiceFactory, "decryptWithKmsKey">; kmsService: Pick<TKmsServiceFactory, "decryptWithKmsKey">;
kmsId: string; kmsId: string;