mirrors/seaweedfs
1
0
Fork 0
mirror of https://github.com/seaweedfs/seaweedfs.git synced 2026-10-21 05:52:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

master: build etcd TLS config when any of ca/client cert/key is set

Browse Source 
Client certificates were ignored unless a CA file was also supplied, so
an etcd server requiring client auth (with a publicly trusted CA) could
never be reached.
This commit is contained in:
Chris Lu
2026-10-20 06:21:38 -07:00
parent ac6ee68580
commit d8b577ef77
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
weed/server/master_volume_id_allocator.go
+6 -3
View File
@@ -25,10 +25,13 @@ func newVolumeIdAllocator(v *util.ViperProxy, topo *topology.Topology) (topology
}
var tlsConfig *tls.Config
if caFile := v.GetString("master.volume_id_etcd.tls_ca_file"); caFile != "" {
caFile := v.GetString("master.volume_id_etcd.tls_ca_file")
certFile := v.GetString("master.volume_id_etcd.tls_client_crt_file")
keyFile := v.GetString("master.volume_id_etcd.tls_client_key_file")
if caFile != "" || certFile != "" || keyFile != "" {
tlsInfo := transport.TLSInfo{
CertFile: v.GetString("master.volume_id_etcd.tls_client_crt_file"),
KeyFile: v.GetString("master.volume_id_etcd.tls_client_key_file"),
CertFile: certFile,
KeyFile: keyFile,
TrustedCAFile: caFile,
}
if tlsConfig, err = tlsInfo.ClientConfig(); err != nil {