zero: derive signing key first thing (#4631)

This commit is contained in:
Denis Mishin 2023-10-20 15:14:20 -04:00 committed by Kenneth Jenkins
parent 0e1061d813
commit 86e4ad65d1

View file

@ -43,16 +43,16 @@ func New(secret []byte) (*Source, error) {
rnd := hkdf.New(sha256.New, secret, nil, nil)
cipher, err := initCipher(rnd)
if err != nil {
return nil, fmt.Errorf("init cypher: %w", err)
}
err = initSecrets(cfg, rnd)
if err != nil {
return nil, fmt.Errorf("init secrets: %w", err)
}
cipher, err := initCipher(rnd)
if err != nil {
return nil, fmt.Errorf("init cypher: %w", err)
}
svc := &Source{
source: source{ready: make(chan struct{})},
fileCipher: cipher,