paulbsd/paulbsd-salt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

updated code security in pki state

Browse Source
This commit is contained in:
Paul 2021-09-25 17:17:29 +02:00
parent d0d57526c8
commit 5966e77b98
1 changed files with 18 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
states/_states/pki.py
View File

@ -31,6 +31,7 @@ def fetched(name=None,
domains=domain_concat) domains=domain_concat)
if currentcert != newcert or currentkey != newkey: if currentcert != newcert or currentkey != newkey:
if len(newcert) > 10 or len(newkey) > 10:
wcert = __salt__['pki.write_file_content'](newcert, fullcertfile) wcert = __salt__['pki.write_file_content'](newcert, fullcertfile)
wkey = __salt__['pki.write_file_content'](newkey, keyfile) wkey = __salt__['pki.write_file_content'](newkey, keyfile)
@ -40,6 +41,9 @@ def fetched(name=None,
ret["changes"]["new"]) ret["changes"]["new"])
ret["comment"] = "Updated certificates and keys" ret["comment"] = "Updated certificates and keys"
ret["result"] = all([wcert, wkey]) ret["result"] = all([wcert, wkey])
else:
ret["comment"] = "Error fetching in certificate / key length"
return ret
else: else:
ret["comment"] = "Config is good and not changed" ret["comment"] = "Config is good and not changed"
ret["result"] = True ret["result"] = True