trickstercache / trickster / 22737041277

74%

push

github

fix: [tls] handle CA-only and client-cert-only TLS configurations in Validate (#940)

TLS.Validate() would attempt os.ReadFile("") for FullChainCertPath and
PrivateKeyPath when only CertificateAuthorityPaths and/or client cert
paths were configured, causing a fatal startup crash:

  error="open : no such file or directory"

Guard each ReadFile call so that server cert/key paths are only read
when non-empty, and additionally validate client cert/key paths when
provided.

Adds options_test.go with coverage for all Validate branches.

Signed-off-by: Luis Cusihuaman <luiscusihuaman88@gmail.com>

16 of 16 new or added lines in 1 file covered. (100.0%)

14895 of 20455 relevant lines covered (72.82%)

0.84 hits per line