mirror of
https://github.com/pomerium/pomerium.git
synced 2025-05-01 19:36:32 +02:00
zero: derive signing key first thing (#4631)
This commit is contained in:
parent
0e1061d813
commit
86e4ad65d1
1 changed files with 5 additions and 5 deletions
|
@ -43,16 +43,16 @@ func New(secret []byte) (*Source, error) {
|
||||||
|
|
||||||
rnd := hkdf.New(sha256.New, secret, nil, nil)
|
rnd := hkdf.New(sha256.New, secret, nil, nil)
|
||||||
|
|
||||||
cipher, err := initCipher(rnd)
|
|
||||||
if err != nil {
|
|
||||||
return nil, fmt.Errorf("init cypher: %w", err)
|
|
||||||
}
|
|
||||||
|
|
||||||
err = initSecrets(cfg, rnd)
|
err = initSecrets(cfg, rnd)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
return nil, fmt.Errorf("init secrets: %w", err)
|
return nil, fmt.Errorf("init secrets: %w", err)
|
||||||
}
|
}
|
||||||
|
|
||||||
|
cipher, err := initCipher(rnd)
|
||||||
|
if err != nil {
|
||||||
|
return nil, fmt.Errorf("init cypher: %w", err)
|
||||||
|
}
|
||||||
|
|
||||||
svc := &Source{
|
svc := &Source{
|
||||||
source: source{ready: make(chan struct{})},
|
source: source{ready: make(chan struct{})},
|
||||||
fileCipher: cipher,
|
fileCipher: cipher,
|
||||||
|
|
Loading…
Add table
Reference in a new issue