Browse Source
Merge pull request #6268 from wlallemand/haproxy-fix-secure-debug
haproxy: don't leak private keys when doing --debug
pull/6285/head
neil
2 months ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
1 additions and
1 deletions
-
deploy/haproxy.sh
|
|
@ -357,7 +357,7 @@ haproxy_deploy() { |
|
|
|
_info "Update existing certificate '${_pem}' over HAProxy ${_socketname}." |
|
|
|
fi |
|
|
|
_socat_cert_set_cmd="echo -e '${_cmdpfx}set ssl cert ${_pem} <<\n$(cat "${_pem}")\n' | socat '${_statssock}' - | grep -q 'Transaction created'" |
|
|
|
_debug _socat_cert_set_cmd "${_socat_cert_set_cmd}" |
|
|
|
_secure_debug _socat_cert_set_cmd "${_socat_cert_set_cmd}" |
|
|
|
eval "${_socat_cert_set_cmd}" |
|
|
|
_ret=$? |
|
|
|
if [ "${_ret}" != "0" ]; then |
|
|
|