Browse Source

Merge pull request #6268 from wlallemand/haproxy-fix-secure-debug

haproxy: don't leak private keys when doing --debug
pull/6285/head
neil 2 months ago
committed by GitHub
parent
commit
f2931163aa
No known key found for this signature in database GPG Key ID: B5690EEEBB952194
  1. 2
      deploy/haproxy.sh

2
deploy/haproxy.sh

@ -357,7 +357,7 @@ haproxy_deploy() {
_info "Update existing certificate '${_pem}' over HAProxy ${_socketname}."
fi
_socat_cert_set_cmd="echo -e '${_cmdpfx}set ssl cert ${_pem} <<\n$(cat "${_pem}")\n' | socat '${_statssock}' - | grep -q 'Transaction created'"
_debug _socat_cert_set_cmd "${_socat_cert_set_cmd}"
_secure_debug _socat_cert_set_cmd "${_socat_cert_set_cmd}"
eval "${_socat_cert_set_cmd}"
_ret=$?
if [ "${_ret}" != "0" ]; then

Loading…
Cancel
Save